Threat Investigation
Request a demo

CVE-2024-36451

High

Description

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

SeverityHigh
CVSS8.8
Exploit probability—
ProductWebmin
PublishedJul 10, 2024
First seenJul 10, 2024
Weakness typeCWE-280CWE-280

How to fix

Update
  • webmin webmin2.003 or later

Affected products

ProductAffected versionsFixed in
webmin webminv < 2.0032.003

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.