PT-2018-18592 · Webmin · Webmin

Paul Stewart · Publicado 2018-03-14 · Atualizado 2018-04-10 · CVE-2018-8712

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Webmin versions 1.840 through 1.880

Description An issue was discovered due to weak default configuration settings, allowing limited users to have full access rights to the underlying Unix system files. This enables users to read sensitive data from the local system, such as the /etc/shadow file, via a "GET /syslog/save log.cgi?view=1&file=/etc/shadow" request.

Recommendations For Webmin versions 1.840 through 1.880, consider disabling the "Can view any file as a log file" setting to prevent limited users from accessing sensitive system files. As a temporary workaround, restrict access to the save log.cgi API endpoint to minimize the risk of exploitation.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-8712

Produtos afetados

Webmin

Referências · 3

• https://7elements.co.uk/resources/technical-advisories/webmin-1-840-1-880-unrestricted-access-arbitrary-files-using-local-file-include · Nota
• https://osv.dev/vulnerability/CVE-2018-8712 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8712 · Nota de Segurança