pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is important because the capture filters can effectively limit the scope of information that a user can see in the data captures. If no filter is present, then all data on the local network segment where the program is running can be captured and downloaded. v3.12 fixes this problem. There is no workaround, you must upgrade to v3.12 or greater.
References
| Link | Resource |
|---|---|
| https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760e3b1ef7 | Patch Third Party Advisory |
| https://github.com/jdhwpgmbca/pcapture/issues/7 | Issue Tracking Patch Third Party Advisory |
| https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qx | Issue Tracking Third Party Advisory |
Configurations
History
05 Aug 2022, 10:55
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-754 |
14 Sep 2021, 18:49
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:pcapture_project:pcapture:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 6.5 |
| References | (MISC) https://github.com/jdhwpgmbca/pcapture/issues/7 - Issue Tracking, Patch, Third Party Advisory | |
| References | (CONFIRM) https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qx - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760e3b1ef7 - Patch, Third Party Advisory |
07 Sep 2021, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-07 19:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-39196
Mitre link : CVE-2021-39196
CVE.ORG link : CVE-2021-39196
JSON object : View
Products Affected
pcapture_project
- pcapture