Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2020-35606
HistoryDec 21, 2020 - 8:15 p.m.

CVE-2020-35606

2020-12-2120:15:00
CWE-78
[email protected]
web.nvd.nist.gov
64
31
cve-2020-35606
arbitrary command execution
webmin
package updates module
cve-2019-12840
security vulnerability

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

87.1%

JSON

Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.

CPENameOperatorVersion
webmin:webminwebminle1.962

Social References

More

Related

packetstorm 2
openvas 2
cvelist 2
osv 2
prion 2
exploitdb 1
githubexploit 5
nessus 2
checkpoint_advisories 2
cve 1
packetstorm
packetstorm
Webmin 1.962 Remote Command Execution
2020-12-22 00:00:00
Webmin 1.910 Remote Command Execution
2019-06-11 00:00:00
openvas
openvas
Webmin <= 1.983 RCE Vulnerability
2020-12-23 00:00:00
Webmin <= 1.941 Remote Code Execution (RCE) Vulnerability
2019-06-17 00:00:00
cvelist
cvelist
CVE-2020-35606
2020-12-21 19:19:17
CVE-2019-12840
2019-06-15 19:52:10
osv
osv
CVE-2020-35606
2020-12-21 20:15:12
CVE-2019-12840
2019-06-15 20:29:00
prion
prion
Command injection
2020-12-21 20:15:00
Command injection
2019-06-15 20:29:00
exploitdb
exploitdb
Webmin 1.962 - &#039;Package Updates&#039; Escape Bypass RCE (Metasploit)
2020-12-22 00:00:00
githubexploit
githubexploit
Exploit for OS Command Injection in Webmin
2021-08-11 10:54:22
Exploit for OS Command Injection in Webmin
2019-11-05 19:22:45
Exploit for OS Command Injection in Webmin
2021-10-05 18:10:05
nessus
nessus
Webmin < 1.970 Multiple Vulnerabilities
2021-02-16 00:00:00
Webmin <= 1.910 Remote Command Execution
2021-02-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Webmin Command Injection (CVE-2020-35606; CVE-2022-36446)
2021-01-20 00:00:00
Webmin Command Injection (CVE-2019-12840)
2021-04-18 00:00:00
cve
cve
CVE-2019-12840
2019-06-15 20:29:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.015 Low

EPSS

Percentile

87.1%

JSON
Related for CVE-2020-35606
packetstorm2openvas2cvelist2osv2prion2exploitdb1githubexploit5nessus2checkpoint_advisories2cve1