In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory. Upon a crash, it may dump a core file. If a user were to mishandle a core file, an attacker can reconstruct the users wallet.dat file, including their private keys, via a grep 6231 0500 command.
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bitcoin_core | Bitcoin | 0.18.0 (including) | 0.18.0 (including) |