Published: 26/08/2019 Updated: 04/09/2019

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

rpc.cgi in Webmin up to and including 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command or modify any file on a server, which is why access to it must not be granted to un-trusted Webmin users."

Vulnerable Product	Search on Vulmon	Subscribe to Product
webmin webmin

Webmin Remote Code Execution (authenticated)

CVE-2019-15642 Webmin Remote Code Execution (authenticated) python Usage: python CVE-2019-15642py xxxxxxxxx:10000 "cat /etc/passwd" 0x01 docker for Webmin cd ~/vulhub/webmin/CVE-2019-15107 docker-compose up -d root@9460493fa985:/# passwd root Webmin > username=root,password=root ⚡ root@jas502n  ~/vulhub/webmin/CVE-2019-15107   master �

CWE-94 https://github.com/webmin/webmin/blob/ab5e00e41ea1ecc1e24b8f8693f3495a0abb1aed/rpc.cgi#L26-L37 https://doxfer.webmin.com/Webmin/Webmin_Servers_Index https://www.calypt.com/blog/index.php/authenticated-rce-on-webmin/https://github.com/webmin/webmin/commit/df8a43fb4bdc9c858874f72773bcba597ae9432c https://nvd.nist.gov https://github.com/jas502n/CVE-2019-15642

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2019-15642

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect