PT-2019-2989 · Webmin · Webmin

Akkus + 1 · Publicado 2019-08-16 · Atualizado 2025-07-24 · CVE-2019-15107

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Webmin versions 1.882 through 1.921

Description The issue is related to a command injection vulnerability in the password change.cgi component of Webmin. This vulnerability allows a remote attacker to execute arbitrary code on the target system by sending a malicious POST request. The old parameter in password change.cgi contains a command injection vulnerability. The exploitation of this vulnerability may allow an attacker to gain access to the system with root privileges.

Recommendations For Webmin versions 1.882 through 1.921, update to a version later than 1.921 to resolve the issue. As a temporary workaround, consider restricting access to the password change.cgi component to minimize the risk of exploitation. Avoid using the old parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

OS Command Injection

Command Injection

Enumeração de Fraquezas

CWE-78

CWE-77

Identificadores relacionados

BDU:2019-02968

CVE-2019-15107

MGASA-2019-0237

Produtos afetados

Webmin

Referências · 51

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_backdoor.rb · Exploit
• 🔥 https://github.com/jas502n/CVE-2019-15107 · Exploit
• 🔥 https://github.com/MuirlandOracle/CVE-2019-15107 · Exploit
• 🔥 https://github.com/hannob/webminex · Exploit
• 🔥 https://github.com/ruthvikvegunta/CVE-2019-15107 · Exploit
• 🔥 https://github.com/AdministratorGithub/CVE-2019-15107 · Exploit
• 🔥 https://github.com/AleWong/WebminRCE-EXP-CVE-2019-15107- · Exploit
• 🔥 https://github.com/n0obit4/Webmin_1.890-POC · Exploit
• 🔥 https://github.com/K3ysTr0K3R/CVE-2019-15107-EXPLOIT · Exploit
• 🔥 https://github.com/Rayferrufino/Make-and-Break · Exploit
• 🔥 https://github.com/HACHp1/webmin_docker_and_exp · Exploit
• 🔥 https://exploit-db.com/exploits/47293 · Exploit
• 🔥 http://packetstormsecurity.com/files/154197/Webmin-1.920-password_change.cgi-Backdoor.html · Exploit
• 🔥 http://packetstormsecurity.com/files/154141/Webmin-1.920-Remote-Command-Execution.html · Exploit
• 🔥 http://packetstormsecurity.com/files/154141/Webmin-Remote-Comman-Execution.html · Exploit