PT-2022-1959 · Webmin+1 · Webmin+1

Mohammad Faisal Sammio · Published 2022-02-17 · Updated 2022-11-21 · CVE-2022-0824

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions webmin versions prior to 1.990

Description The issue is related to improper access control in the webmin repository, which can lead to remote code execution. This is due to weaknesses in the authorization mechanism of the File Manager module in the webmin web interface for UNIX-like operating systems. An attacker can exploit this issue to elevate privileges or execute arbitrary code by running the chmod command or uploading files with .cgi permissions.

Recommendations For versions prior to 1.990, update to version 1.990 or later to resolve the issue. As a temporary workaround, consider restricting access to the File Manager module to minimize the risk of exploitation. Avoid using the File Manager module until the issue is resolved.

Exploit

Fix

RCE

Improper Access Control

Incorrect Authorization

Weakness Enumeration

CWE-284

CWE-863

Related Identifiers

BDU:2022-01518

CVE-2022-0824

MGASA-2022-0090

Affected Products

Red Os

Webmin

References · 29

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0824.json · Exploit
• 🔥 https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell · Exploit
• 🔥 https://github.com/honypot/CVE-2022-0824 · Exploit
• 🔥 https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell · Exploit
• 🔥 http://packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.html · Exploit
• 🔥 https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295 · Exploit
• 🔥 https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html · Exploit
• 🔥 http://packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/50809 · Exploit
• https://github.com/webmin/webmin/commit/39ea464f0c40b325decd6a5bfb7833fa4a142e38 · Patch
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0824 · Vendor Advisory
• https://goslinux.fssp.gov.ru/2726972 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-0824 · Security Note