Skip to content
OpenAdvisories

Vendor

Ajenti Project

6 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.2

    Ajenti has an authorization bypass during custom package installation

    Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.

  • High 8.1

    Ajenti has a potential Remote Code Execution

    Ajenti is a Linux and BSD modular server admin panel. Prior to version 2.2.13, an unauthenticated user could gain access to a server to execute arbitrary code on this server. This is fixed in the version 2.2.13.