Описание
Ajenti has an authorization bypass during custom package installation
Impact
An authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser.
Patches
This is fixed in the version 2.2.15. Users should upgrade to this version as soon as possible.
Пакеты
Наименование
ajenti-panel
pip
Затронутые версииВерсия исправления
< 2.2.15
2.2.15
Связанные уязвимости
CVSS3: 6.5
nvd
4 месяца назад
Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.
CVSS3: 6.5
debian
4 месяца назад
Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, ...