2 matches found
Webmin < 1.230 miniserv.pl Authentication Bypass
According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.230. It is, therefore, affected by a potential authentication bypass via spoofed session IDs. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid108548; scriptversion"1.5";...
7.5CVSS5.5AI score0.04127EPSS
SaveExploits0References3
CVE-2005-3042: Undefined Security Weakness
miniserv.pl in Webmin before 1.230 and Usermin before 1.160, when "full PAM conversations" is enabled, allows remote attackers to bypass authentication by spoofing session IDs via certain metacharacters line feed or carriage return...
7.5CVSS5.8AI score0.04127EPSS
SaveExploits0References1
20