Описание
Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, an authenticated user (using the auth_users plugin authentication method) could install a custom package even if this user is not superuser. This vulnerability is fixed in 2.2.15.
Ссылки
- ProductRelease Notes
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.2.15 (исключая)
cpe:2.3:a:ajenti:ajenti:*:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00266
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-862
Связанные уязвимости
CVSS3: 6.5
debian
4 месяца назад
Ajenti is a Linux and BSD modular server admin panel. Prior to 2.2.15, ...
github
5 месяцев назад
Ajenti has an authorization bypass during custom package installation
EPSS
Процентиль: 19%
0.00266
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-862