CVE-2024-23770

Name of the Vulnerable Software and Affected Versions darkhttpd versions 1.15 and earlier

Description The issue allows local users to discover credentials by listing processes and their arguments. This is related to the --auth option.

Recommendations For darkhttpd versions 1.15 and earlier, consider restricting access to process listings to minimize the risk of credential discovery until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.