Description
Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.
References
- webmin-identical-ssl-keys(10381) vdb-entry
- 5936 vdb-entry
- http://www.webmin.com/changes.html