CVE-2018-1000126

Ajenti Web Panel v2 has an information disclosure vulnerability in the source code at line 176 that can enable enumeration of users/systems and exfiltration of data from /etc/ajenti/config.yml. Exploitation is described as feasible over network connectivity to the web application. The connected R...