The Read Mail module in Webmin 1.720 allows local users to read arbitrary files via a symlink attack on an unspecified file.
References
Link | Resource |
---|---|
http://www.webmin.com/changes.html | Vendor Advisory |
http://www.webmin.com/security.html | Vendor Advisory |
http://secunia.com/advisories/62157 |
Configurations
Information
Published : 2015-02-10 12:59
Updated : 2015-02-11 11:45
NVD link : CVE-2015-1377
Mitre link : CVE-2015-1377
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
webmin
- webmin