OSVDB ID: 26772 Title: Webmin/Usermin simplify_path() Failure Arbitrary File Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Webmin / Usermin contain a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an unspecified error occurs during URL handling by simplify_path() function, which will disclose files content information resulting in a loss of confidentiality. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Rumored Disclosure: Vendor Verified OSVDB: Web Related |
Solution |
Upgrade to Webmin version 1.290, Usermin version 1.220, or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|