SECURITY BULLETIN: Webmin as used in IBM QRadar SIEM is vulnerable to Execute code as root. (CVE-2015-2011)

Summary The xmlrpc.cgi Webmin script allows arbitrary command execution and escalation of privileges. Vulnerability Details CVE-ID: CVE-2015-2011 Description: IBM QRadar could allow an authenticated user to execute code as root. CVSS Base Score:8.5 CVSS Temporal Score: See...

Webmin < 1.760 xmlrpc.cgi Cross Site Scripting Vulnerability

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.760. It is, therefore, affected by a cross site scripting vulnerability in xmlrpc.cgi, which could potentially lead to remote code execution in certain products. C Tenable Network Security, Inc...

CVE-2015-2011

The CVE-2015-2011 entry concerns IBM QRadar SIEM where the xmlrpc.cgi Webmin script allows remote authenticated users to execute arbitrary commands with root privileges via unspecified vectors. Affected products/versions include IBM QRadar SIEM 7.2.x and 7.1 MR2 with patches: 7.2.5 Patch 4 and 7....