Vulnerability Description
pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is important because the capture filters can effectively limit the scope of information that a user can see in the data captures. If no filter is present, then all data on the local network segment where the program is running can be captured and downloaded. v3.12 fixes this problem. There is no workaround, you must upgrade to v3.12 or greater.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pcapture Project | Pcapture | < 3.12 |
Related Weaknesses (CWE)
References
- https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760ePatchThird Party Advisory
- https://github.com/jdhwpgmbca/pcapture/issues/7Issue TrackingPatchThird Party Advisory
- https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qxIssue TrackingThird Party Advisory
- https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760ePatchThird Party Advisory
- https://github.com/jdhwpgmbca/pcapture/issues/7Issue TrackingPatchThird Party Advisory
- https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qxIssue TrackingThird Party Advisory
FAQ
What is CVE-2021-39196?
CVE-2021-39196 is a vulnerability with a CVSS score of 7.7 (HIGH). pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets wit...
How severe is CVE-2021-39196?
CVE-2021-39196 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-39196?
Check the references section above for vendor advisories and patch information. Affected products include: Pcapture Project Pcapture.