Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9848-6qgw-2748

Опубликовано: 18 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.641.

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.641.

EPSS

Процентиль: 42%
0.00525
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-308

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 месяцев назад

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.641.

CVSS3: 5.3
nvd
около 2 месяцев назад

Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements. Fixed in 2.641.

CVSS3: 5.3
debian
около 2 месяцев назад

Webmin accepts basic authentication without session cookies when an at ...

EPSS

Процентиль: 42%
0.00525
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-308