JVN#81442045: Multiple vulnerabilities in multiple Webmin products

🗓️ 09 Jul 2024 00:00:00Reported by Japan Vulnerability NotesType

jvn🔗 jvn.jp👁 39 Views

Multiple vulnerabilities in Webmin products. Vulnerabilities include cross-site scripting, improper permissions handling, and cross-site request forgery impacting sysinfo.cgi, session_login.cgi, and ajaxterm module. Impact includes arbitrary script execution, hijacking console session, and unintended operations. Solution involves updating the software to the latest version. Products affected include specific versions of Webmin and Usermin

Reporter	Title	Published	Views	Family All 38
BDU FSTEC	The vulnerability of the ajaxterm module in the Webmin hosting control panel allows a hacker to intercept the console session.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the sysinfo.cgi script implemented in the Webmin hosting control panel allows a hacker to execute arbitrary scripts.	19 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the session_login.cgi script of the Webmin hosting panel and the web interface for Unix-like systems, Usermin, allows attackers to perform cross-site scripting attacks.	26 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ajaxterm module in the Webmin hosting control panel allows a attacker to perform a CSRF attack.	26 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-36450	10 Jul 202409:39	–	circl
Circl	CVE-2024-36451	10 Jul 202409:39	–	circl
Circl	CVE-2024-36452	10 Jul 202409:39	–	circl
Circl	CVE-2024-36453	10 Jul 202409:39	–	circl
CNNVD	Webmin Security Vulnerabilities	9 Jul 202400:00	–	cnnvd
CNNVD	Webmin Security Vulnerabilities	9 Jul 202400:00	–	cnnvd

09 Jul 2024 00:00Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.15.4 - 8.8

EPSS0.00298

SSVC