CVE-2019-16752 - CVE House
Back to Database
Status published Medium CVE-2019-16752

An issue was discovered in Decentralized Anonymous Payment System (DAPS)...

Vulnerability Description

An issue was discovered in Decentralized Anonymous Payment System (DAPS) through 2019-08-26. It is possible to force wallets to send HTTP requests to arbitrary locations, both on the local network and on the internet. This is a serious threat to user privacy, since it can possibly leak their IP address and the fact that they are using the product. This also affects Dash Core through 0.14.0.3 and Private Instant Verified Transactions (PIVX) through 3.4.0.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16752

Credits & Attribution

No credits recorded in the NVD database.

References

More from dash

View All →
CVE-2009-0854
Untrusted search path vulnerability in dash 0.5.4, when used as...
Medium 6.9

Affected Vendor

Affected Software

dash core, decentralized anonymous payment system, private instant verified transactions
Vulnerable Versions:
0

Timeline

Official Publish: December 4th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.