Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-23xj-gfh3-wf2h

Опубликовано: 18 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 9.2
CVSS3: 8.1

Описание

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

EPSS

Процентиль: 40%
0.00495
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 8.1
ubuntu
около 1 месяца назад

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
nvd
около 1 месяца назад

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header. A remote attacker can spoof certificate DNs and authenticate as any user. Fixed in 2.641.

CVSS3: 8.1
debian
около 1 месяца назад

The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers ...

EPSS

Процентиль: 40%
0.00495
Низкий

9.2 Critical

CVSS4

8.1 High

CVSS3

Дефекты

CWE-290