CVE-2021-39196

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

pcapture is an open source dumpcap web service interface . In affected versions this vulnerability allows an authenticated but unprivileged user to use the REST API to capture and download packets with no capture filter and without adequate permissions. This is important because the capture filters can effectively limit the scope of information that a user can see in the data captures. If no filter is present, then all data on the local network segment where the program is running can be captured and downloaded. v3.12 fixes this problem. There is no workaround, you must upgrade to v3.12 or greater.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287 CWE-754

Affected software

No affected versions have been published.

Timeline

Published: Sep 7, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-391978.8better_errors is an open source replacement for the standard Rails error page with more information rich error pages. It is also usable outs CVE-2021-391985.4OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which c CVE-2021-391996.1remark-html is an open source nodejs library which compiles Markdown to HTML. In affected versions the documentation of remark-html has ment CVE-2021-39205.4grav-plugin-admin is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2021-392005.3WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versio CVE-2021-392015.4WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. ### Impact The iss CVE-2021-392025.4WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versio CVE-2021-392036.5WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. In affected versio CVE-2021-392047.5Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, incorrectly handles resetting of HTTP/2 streams w CVE-2021-392056.1Jitsi Meet is an open source video conferencing application. Versions prior to 2.0.6173 are vulnerable to client-side cross-site scripting v CVE-2021-392068.6Pomerium is an open source identity-aware access proxy. Envoy, which Pomerium is based on, contains two authorization related vulnerabilitie CVE-2021-392078.8parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the pac