Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClonOS WEB control panel 授权问题漏洞
Vulnerability Description
ClonOS是一套基于FreeBSD的开源平台。该平台主要用于虚拟环境的创建和管理。WEB control panel是其中的一个基于Web的ClonOS控制面板。 ClonOS WEB control panel 19.09版本中的clonos.php文件存在安全漏洞，该漏洞源于没有进行会话管理。远程攻击者可通过发送密码更改请求利用该漏洞获取全部的访问权限。
CVSS Information
N/A
Vulnerability Type
N/A