CVE-2018-10057

Published June 5th, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).

tintinweb/pub

Vulnerability Notes, PoC Exploits and Write-Ups for security issues disclosed by tintinweb

GitHub

265