PT-2024-20074
CVE-2024-23770
·
تاريخ النشر
2024-01-21
·
تاريخ التحديث
2026-09-29
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
darkhttpd versions 1.15 and earlier
Description
The issue allows local users to discover credentials by listing processes and their arguments. This is related to the --auth option.
Recommendations
For darkhttpd versions 1.15 and earlier, consider restricting access to process listings to minimize the risk of credential discovery until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾