PT-2019-14314 · Webmin · Webmin

Loïc · Published 2019-08-26 · Updated 2019-09-04 · CVE-2019-15642

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Webmin versions prior to 1.920

Description The issue allows authenticated remote code execution via a crafted object name. This is because the unserialise variable function makes an eval call. It's noted that RPC can be used to run any command or modify any file on a server, emphasizing the importance of restricting access to trusted Webmin users.

Recommendations For versions prior to 1.920, update to version 1.920 or later to resolve the issue. As a temporary workaround, consider restricting access to the RPC functionality to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2019-15642

Affected Products

Webmin

References · 7

• 🔥 https://github.com/jas502n/CVE-2019-15642 · Exploit
• 🔥 https://calypt.com/blog/index.php/authenticated-rce-on-webmin · Exploit
• https://github.com/webmin/webmin/commit/df8a43fb4bdc9c858874f72773bcba597ae9432c · Patch
• https://github.com/webmin/webmin/blob/ab5e00e41ea1ecc1e24b8f8693f3495a0abb1aed/rpc.cgi#L26-L37 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-15642 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15642 · Vendor Advisory
• https://doxfer.webmin.com/Webmin/Webmin_Servers_Index · Vendor Advisory