ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-23770

—
CVSS 3.1
5.5 medium
EPSS
<1%p15
Published
()
Modified
Description

darkhttpd through 1.15 allows local users to discover credentials (for --auth) by listing processes and their arguments.

Vendors
unix4lyfe
Products
darkhttpd
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

No ingested article mentions this CVE yet.