Lucene search

GoogleOSV:CVE-2024-23770

HistoryJan 22, 2024 - 4:15 a.m.

CVE-2024-23770

2024-01-2204:15:07

Google

osv.dev

darkhttpd disclosure credential

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.

CPENameOperatorVersion
darkhttpdeq1.11-r4
darkhttpdeq1.14-r0
darkhttpdeq1.9-r0
darkhttpdeq1.11-r3
darkhttpdeq1.12-r2
darkhttpdeq1.12-r6
darkhttpdeq1.12-r3
darkhttpdeq1.9-r1
darkhttpdeq1.12-r1
darkhttpdeq1.13

Name	Operator	Version
darkhttpd	eq	1.11-r4
darkhttpd	eq	1.14-r0
darkhttpd	eq	1.9-r0
darkhttpd	eq	1.11-r3
darkhttpd	eq	1.12-r2
darkhttpd	eq	1.12-r6
darkhttpd	eq	1.12-r3
darkhttpd	eq	1.9-r1
darkhttpd	eq	1.12-r1
darkhttpd	eq	1.13

Rows per page:

1-10 of 231

References

www.openwall.com/lists/oss-security/2024/01/25/1

github.com/emikulic/darkhttpd/commit/2b339828b2a42a5fda105ea84934957a7d23e35d

github.com/emikulic/darkhttpd/compare/v1.14...v1.15

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:CVE-2024-23770