PT-2018-18592 · Webmin · Webmin

Paul Stewart · Published 2018-03-14 · Updated 2018-04-10 · CVE-2018-8712

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Webmin versions 1.840 through 1.880

Description An issue was discovered due to weak default configuration settings, allowing limited users to have full access rights to the underlying Unix system files. This enables users to read sensitive data from the local system, such as the /etc/shadow file, via a "GET /syslog/save log.cgi?view=1&file=/etc/shadow" request.

Recommendations For Webmin versions 1.840 through 1.880, consider disabling the "Can view any file as a log file" setting to prevent limited users from accessing sensitive system files. As a temporary workaround, restrict access to the save log.cgi API endpoint to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2018-8712

Affected Products

Webmin

References · 3

• https://osv.dev/vulnerability/CVE-2018-8712 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8712 · Security Note
• https://7elements.co.uk/resources/technical-advisories/webmin-1-840-1-880-unrestricted-access-arbitrary-files-using-local-file-include · Note