CVE-2021-39196

Katalog CVE

CVSS 6.5 · Medium EPSS 1,3%

Kerentanan Improper Authentication pada pcapture project pcapture. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is important because the capture filters can effectively limit the scope of information that a user can see in the data captures. If no filter is present, then all data on the local network segment where the program is running can be captured and downloaded. v3.12 fixes this problem. There is no workaround, you must upgrade to v3.12 or greater.

Rincian

Terbit di NVD

7 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication
CWE-754: Improper Check for Unusual or Exceptional Conditions

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 68,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760e3b1ef7 patch · advisory pihak ketiga
• https://github.com/jdhwpgmbca/pcapture/issues/7 issue tracking · patch · advisory pihak ketiga
• https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qx issue tracking · advisory pihak ketiga