PT-2021-22451 · Capture · Capture

Jdhwpgmbca · Published 2021-09-07 · Updated 2022-08-05 · CVE-2021-39196

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions pcapture versions prior to 3.12

Description The issue allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is significant because capture filters can limit the scope of information that a user can see in the data captures. If no filter is present, all data on the local network segment where the program is running can be captured and downloaded.

Recommendations For versions prior to 3.12, upgrade to version 3.12 or greater to resolve the issue. There is no workaround, and upgrading is the only solution to fix the problem.

Fix

Improper Authentication

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-287

CWE-754

Related Identifiers

CVE-2021-39196

GHSA-3R67-FXPR-P2QX

Affected Products

Capture

References · 7

• https://github.com/jdhwpgmbca/pcapture/commit/0f74f431e0970a2e5784dbd955cfa4760e3b1ef7 · Patch
• https://github.com/jdhwpgmbca/pcapture/issues/7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-39196 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39196 · Vendor Advisory
• https://github.com/jdhwpgmbca/pcapture/security/advisories/GHSA-3r67-fxpr-p2qx · Note
• https://t.me/cibsecurity/28381 · Telegram Post
• https://t.me/cvenotify/34303 · Telegram Post