What is CVE-2021-39196?

CVE-2021-39196 is a high-severity vulnerability in Jdhwpgmbca Pcapture, classified under Improper Authentication. CVSS score: 7.7/10. Published 2021-09-07.

How severe is CVE-2021-39196?

High severity. CVSS v3 base score is 7.7 out of 10.

Auth bypass in Jdhwpgmbca Pcapture

CVE-2021-39196

pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is important because the capture filters can effectively limit the scope of information that a user can see in the data captures. If no filter is present, then all data on the local network segment where the program is running can be captured and downloaded. v3.12 fixes this problem. There is no workaround, you must upgrade to v3.12 or greater.

Vulnerability class: Broken Authentication

EPSS: 0.013 (66.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N.

Affected products

Jdhwpgmbca Pcapture — versions < 3.12
Pcapture_project Pcapture

Weakness classification (CWE)

References

security-advisories@github.com (x_refsource_CONFIRM, Third Party Advisory, Issue Tracking)
security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)
security-advisories@github.com (Patch, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2021-39196?: CVE-2021-39196 is a high-severity vulnerability in Jdhwpgmbca Pcapture, classified under Improper Authentication. CVSS score: 7.7/10. Published 2021-09-07.
How severe is CVE-2021-39196?: High severity. CVSS v3 base score is 7.7 out of 10.