Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Webmin不安全目录权限漏洞
Vulnerability Description
Webmin是一宽基于WEB接口的Unix和Linux操作系统系统管理程序。 Webmin在从RPM安装时存在问题，建立全局可读的/var/webmin目录，可导致敏感信息被泄露。 Webmin在RPM安装后建立的/var/webmin目录全局可读，如果命令日志功能激活的情况下，就可能造成本地攻击者读取root用户基于COOKIE的认证信息，使用这些认证信息就可以劫持ROOT用户的Webmin会话并控制整个系统。 目录/etc/webmin/servers/也以全局可读属性设置，并且以明文方式存在相关认证
CVSS Information
N/A
Vulnerability Type
N/A