PT-2024-28382 · Unknown · Ispmanager

Published 2024-07-05 · Updated 2025-07-15 · CVE-2024-39182

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ISPmanager version 6.98.0

Description An information disclosure issue allows attackers to access sensitive details of the root user's session via an arbitrary command.

Recommendations For ISPmanager version 6.98.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-39182

Affected Products

Ispmanager

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-39182 · Security Note
• https://t.me/cvenotify/85297 · Telegram Post
• https://ispmanager.com/changelog · Note
• https://t.me/cvedetector/137 · Telegram Post
• https://twitter.com/CVEnew/status/1809354423992218056 · Twitter Post
• https://t.me/cvenotify/89933 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1809387304307367998 · Twitter Post