Skip to content
NewA calmer, faster ZeroHour

Backdoored Webmin versions were available for download for over a year

Security Affairsby @securityaffairs ()2 min read2
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2019-15107
Unauthenticated Command Injection RCE in Webmin <= 1.920
9.8100%KEVRansomwarePoC ×5
KEV

From the original article

2 min read at securityaffairs.com

Webmin, the popular open-source web-based interface for Unix admin contained a remote code execution vulnerability for more than a year. Webmin is an open-source web-based interface for system administration for Linux and Unix. It allows users using web browsers to set up user accounts, Apache, DNS, file sharing and much more.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.