CVE-2024-44069

n/a / n/a PUBLISHED

Description (CNA)

Pi-hole before 6 allows unauthenticated admin/api.php?setTempUnit= calls to change the temperature units of the web dashboard. NOTE: the supplier reportedly does "not consider the bug a security issue" but the specific motivation for letting arbitrary persons change the value (Celsius, Fahrenheit, or Kelvin), seen by the device owner, is unclear.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/pi-hole/web/pull/3077
https://www.kiyell.com/The-Harmless-Pihole-Bug/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.