Lucene search

RedosROS-20240917-06

HistorySep 17, 2024 - 12:00 a.m.

ROS-20240917-06

2024-09-1700:00:00

redos.red-soft.ru

glitch

webmin

hosting control panel

unix

session_login.cgi

vulnerability

cross-site scripting

remote attack

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

Low

JSON

A glitch in the session_login.cgi script of the Webmin hosting control panel and web interface for
unix-like systems Usermin exists due to failure to take measures to protect the structure of the web page.
Exploitation of the vulnerability could allow an attacker acting remotely to conduct a cross-site
scripted attacks using a specially crafted link

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64webmin< 1.981-4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
redos	7.3	x86_64	webmin	< 1.981-4	UNKNOWN

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

Low

JSON

Related for ROS-20240917-06