CVE-2024-36451

2024-07-1007:01:26

jpcert

www.cve.org

webmin

ajaxterm

insufficient permissions

privileges vulnerability

unauthorized user

console session hijack

data breach

altered webpage

server halt

EPSS

Percentile

9.2%

JSON

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

CNA Affected

[
  {
    "vendor": "Webmin",
    "product": "Webmin",
    "versions": [
      {
        "version": "prior to 2.003",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/jp/JVN81442045/

webmin.com/

EPSS

Percentile

9.2%

JSON

Related for CVELIST:CVE-2024-36451