Skip to content
OpenAdvisories
High · 8.8 CVE-2024-36451 EUVD-2024-36095GHSA-4cjw-fj8x-xj3r

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulne…

Published Jul 10, 2024 · Updated Aug 2, 2024 · Assigned by jpcert

Description

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

Affected products

VendorProductAffectedFixed
Webmin Webmin prior to 2.003 —

Advisories 1

References