Beveiligingsadvies

CVE-2020-35606

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-12-21 19:19:17
Laatst bijgewerkt 2024-08-04 17:09:14
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Arbitrary command execution can occur in Webmin through 1.962. Any user authorized for the Package Updates module can execute arbitrary commands with root privileges via vectors involving %0A and %0C. NOTE: this issue exists because of an incomplete fix for CVE-2019-12840.