{"id":"CVE-2016-8889","details":"In Bitcoin Knots v0.11.0.ljr20150711 through v0.13.0.knots20160814 (fixed in v0.13.1.knots20161027), the debug console stores sensitive information including private keys and the wallet passphrase in its persistent command history.","modified":"2026-07-08T10:55:04.370503Z","published":"2016-10-28T15:59:16.780Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/94235"},{"type":"ADVISORY","url":"https://bitcointalk.org/index.php?topic=1618462.0"},{"type":"FIX","url":"https://github.com/bitcoinknots/bitcoin/blob/v0.13.1.knots20161027/doc/release-notes.md"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bitcoinknots/bitcoin","events":[{"introduced":"d26f951802c762de04fb68e1a112d611929920ba"},{"last_affected":"c372395f0d8b8b7dde63f6489e98e03264abe2d7"}],"database_specific":{"extracted_events":[{"introduced":"0.11.0"},{"last_affected":"0.11.0"},{"introduced":"0.11.0-rc1"},{"last_affected":"0.11.0-rc1"},{"introduced":"0.11.0-rc2"},{"last_affected":"0.11.0-rc2"},{"introduced":"0.11.0-rc3"},{"last_affected":"0.11.0-rc3"},{"introduced":"0.11.1"},{"last_affected":"0.11.1"},{"introduced":"0.11.1-rc1"},{"last_affected":"0.11.1-rc1"},{"introduced":"0.11.1-rc2"},{"last_affected":"0.11.1-rc2"},{"introduced":"0.11.2"},{"last_affected":"0.11.2"},{"introduced":"0.11.2-rc1"},{"last_affected":"0.11.2-rc1"},{"introduced":"0.12.0"},{"last_affected":"0.12.0"},{"introduced":"0.12.0-rc1"},{"last_affected":"0.12.0-rc1"},{"introduced":"0.12.0-rc2"},{"last_affected":"0.12.0-rc2"},{"introduced":"0.12.0-rc3"},{"last_affected":"0.12.0-rc3"},{"introduced":"0.12.0-rc4"},{"last_affected":"0.12.0-rc4"},{"introduced":"0.12.0-rc5"},{"last_affected":"0.12.0-rc5"},{"introduced":"0.12.0.knots20160226-rc1"},{"last_affected":"0.12.0.knots20160226-rc1"},{"introduced":"0.12.1.knots20160629-rc2"},{"last_affected":"0.12.1.knots20160629-rc2"},{"introduced":"0.13.0.knots20160814"},{"last_affected":"0.13.0.knots20160814"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.0:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.1:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.1:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.1:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.2:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.11.2:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.0:*:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.0:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.0:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.0:rc3:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.0:rc4:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.0:rc5:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.0.knots20160226:rc1:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.12.1.knots20160629:rc2:*:*:*:*:*:*","cpe:2.3:a:bitcoin_knots_project:bitcoin_knots:0.13.0.knots20160814:*:*:*:*:*:*:*"]}}],"versions":["0.11.0","0.11.0-rc1","0.11.0-rc2","0.11.0-rc3","0.11.1","0.11.1-rc1","0.11.1-rc2","0.11.2","0.11.2-rc1","0.12.0","0.12.0-rc1","0.12.0-rc2","0.12.0-rc3","0.12.0-rc4","0.12.0-rc5","0.12.0.knots20160226-rc1","0.12.1.knots20160629-rc2","0.13.0.knots20160814"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-8889.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}