CVE Feed

    Dashboard / CVE / CVE-2019-16752

    CVE-2019-16752

    An issue was discovered in Decentralized Anonymous Payment System (DAPS) through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP address and the fact that they are using the product. This also affects Dash Core through 0.14.0.3 and Private Instant Verified Transactions (PIVX) through 3.4.0.

    Published:Dec 4, 2019
    Last Modified:Nov 21, 2024
    EPS:Dec 4, 2019
    EPSS Score:0.0017
    CVSS Score:4.3

    Affected Products

    Vendor
    Dash
    Product
    Dash Core
    Vendor
    Officialdapscoin
    Product
    Decentralized Anonymous Payment System
    Vendor
    Pivx
    Product
    Private Instant Verified Transactions

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High