PT-2014-5575 · Webmin · Usermin

Published 2014-06-21 · Updated 2014-06-23 · CVE-2014-3883

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Usermin versions prior to 1.600

Description The issue allows remote attackers to execute arbitrary operating-system commands. This is related to a user action, although the specific vectors are not specified.

Recommendations For versions prior to 1.600, update to version 1.600 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2014-3883

Affected Products

Usermin

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2014-3883 · Security Note
• http://jvn.jp/en/jp/JVN48805624/index.html · Note
• https://ipa.go.jp/security/ciadr/vul/20140620-jvn.html · Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000057 · Note