CVE-2018-20587

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control

published February 11, 2019

CVSS
—
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control. Local users can exploit this to steal currency by binding the RPC IPv4 localhost port, and forwarding requests to the IPv6 localhost port.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00352 · 27.4th percentile
Published
2019-02-11T12:00Z
EPSS history
Timeline
  • 11 FEB 12:00Z
    Bitcoin Core 0.12.0 through 0.17.1 and Bitcoin Knots 0.12.0 through 0.17.x before 0.17.1.knots20181229 have Incorrect Access Control
    cvelistv5