Skip to content
OpenAdvisories
Unscored CVE-2018-1000126 EUVD-2018-0007GHSA-8jpc-25w7-fj92PYSEC-2018-113

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumera…

Published Mar 13, 2018 · Updated Sep 16, 2024 · Assigned by mitre

Description

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. This attack appears to be exploitable via network connectivity to the web application.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI ajenti-panel all versions — PYSEC-2018-113

References