CVE-2022-0829

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0824

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0824

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990...

Authorization

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0824

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990...

Improper access control

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829 Improper Authorization in webmin/webmin

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829 Improper Authorization in webmin/webmin

Improper Authorization in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0829

The CVE-2022-0829 entry concerns Webmin prior to 1.990 with improper authorization. Several connected sources confirm an access-control weakness in Webmin’s File Manager could allow a low-privileged or unauthenticated user to access restricted functionality, potentially enabling escalation when c...

Webmin 授权问题漏洞

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. an authorization issue vulnerability exists in versions of Webmin prior to 1.990, which stems from a lack of authentication measures or insufficient authentication strength in a networked...

CVE-2022-0824 Improper Access Control to Remote Code Execution in webmin/webmin

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990...

Webmin 访问控制错误漏洞

Webmin is the Webmin community's set of Web-based system management tools for Unix-like operating systems. webmin versions prior to 1.990 have an elevation of privilege vulnerability that stems from a faulty program to high-level local procedure calls. An attacker could exploit this vulnerability...

CVE-2022-0824 Improper Access Control to Remote Code Execution in webmin/webmin

Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990...

CVE-2022-0824

CVE-2022-0824 affects Webmin prior to 1.990, enabling authenticated but low-privilege users to achieve remote code execution via the File Manager module. The root cause is improper access control that allows manipulation (download and chmod) of files and execution of crafted CGI payloads. Several...

Improper Access Control in File Manager module

Description In Webmin 1.984, any authenticated low privilege user who did not have access to the File Manager module could interact with a variety of file manager capabilities such as modifying file ownership chown, viewing file properties, listing or deleting files and directories on the server...

Improper Authorization in webmin/webmin

Description The /cron/saveallow.cgi endpoint is accessible to any authenticated low privilege users resulting in controlling user access to cron jobs. They could allow and deny other users access to cron jobs affecting the Scheduled Cron Jobs module. Proof of Concept Affected Endpoint: GET...

Improper Access Control to Remote Code Execution

Description In Webmin v1.984, affecting File Manager module, any authenticated low privilege user without access rights to the File Manager module could interact with file manager functionalities such as download file from remote URL and change file permission chmod. It is possible to achieve...

PT-2022-1959 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: webmin versions prior to 1.990 Description: The issue is related to improper access control in the webmin repository, which can lead to remote code execution. This is due to weaknesses in the authorization mechanism of the File Manager module...

Mageia: Security Advisory (MGASA-2017-0017)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...