CVE-2012-2983

file/edit_html.cgi in Webmin 1.590 and earlier does not perform an authorization check before showing a file's unedited contents, which allows remote attackers to read arbitrary files via the file field.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

20.46% chance of exploitation in the next 30 days, 97th percentile

Published

2012-09-11

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/webmin/edit_html_fileacce…

References

• CVE Record
• NVD entry

Related

• CVE-2012-2982
• CVE-2012-2984
• CVE-2012-2977
• CVE-2012-2986
• CVE-2012-2962
• CVE-2012-2994