Lucene search
HistoryJan 22, 2024 - 4:15 a.m.
CVE-2024-23770
darkhttpd
cve-2024-23770
local user
credential exposure
security vulnerability
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.
Affected configurations
Node
unix4lyfedarkhttpdRange≤1.15
| CPE | Name | Operator | Version |
|---|---|---|---|
| unix4lyfe:darkhttpd | unix4lyfe darkhttpd | le | 1.15 |
Related
cvelist
cvelist
CVE-2024-23770
2024-01-22 00:00:00
nvd
nvd
CVE-2024-23770
2024-01-22 04:15:07
alpinelinux
alpinelinux
CVE-2024-23770
2024-01-22 04:15:07
prion
prion
Default credentials
2024-01-22 04:15:00
osv
osv
CVE-2024-23770
2024-01-22 04:15:07
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2024-23770