CVE-2024-36451

July 10, 2024, 7:15 a.m.

None
No Score

Description

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

Product(s) Impacted

Product Versions
Webmin
  • before 2.003

Weaknesses

References

https://jvn.jp/en/jp/JVN81442045/
https://webmin.com/

Tags

vultures@jpcert.or.jp
2024-07-10
CVE-2024-36451

Date

  • Published: July 10, 2024, 7:15 a.m.
  • Last Modified: July 10, 2024, 7:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

vultures@jpcert.or.jp

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.