Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. This attack appears to be exploitable via network connectivity to the web application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ajenti 信息泄露漏洞
Vulnerability Description
Ajenti是白俄罗斯软件开发者Eugene Pankov所研发的一套基于Web的开源服务器管理系统。该系统附带多种预制插件,用于配置和监控服务器软件和服务,如Apache、计划任务(Cron)等。 Ajenti 2版本中的第176行源代码存在信息泄露漏洞。攻击者可借助对Web应用程序的网络链接利用该漏洞获取信息(枚举用户、系统等)。
CVSS Information
N/A
Vulnerability Type
N/A