PT-2014-5575 · Webmin · Usermin

Publicado 2014-06-21 · Atualizado 2014-06-23 · CVE-2014-3883

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Usermin versions prior to 1.600

Description The issue allows remote attackers to execute arbitrary operating-system commands. This is related to a user action, although the specific vectors are not specified.

Recommendations For versions prior to 1.600, update to version 1.600 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2014-3883

Produtos afetados

Usermin

Referências · 4

• http://jvn.jp/en/jp/JVN48805624/index.html · Nota
• https://ipa.go.jp/security/ciadr/vul/20140620-jvn.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3883 · Nota de Segurança
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000057 · Nota