Firetruck

CVE-2019-15107

KEV · Ransomware

Webmin Command Injection Vulnerability

View CVE record →
Vendor / Project
Webmin
Product
Webmin
Date added
Mar 25, 2022
Due date
Apr 15, 2022
Known ransomware use
Known
CWEs
CWE-78

Description

An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.

Required action

Apply updates per vendor instructions.

Notes