Skip to content
COOEY

FAIL › dossier

Webmin

VENDOR

Failure events
2
Zero-days
0
RCEs
1
On KEV
1
Critical
1
Worst shame
72
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 4
DATEEVENTSEVSUMMARY
2022-03-25 CVE-2019-15107 critical Webmin's password change functionality contained a command injection vulnerability actively exploited by ransomware actors, allowing attackers to execute arbitrary commands on vulnerable systems.
2022-03-25 CVE-2019-15107 critical Webmin's password change functionality contained a command injection vulnerability actively exploited by ransomware actors, allowing attackers to execute arbitrary commands on vulnerable systems.
2019-08-16 CVE-2019-15107 critical CVE-2019-15107: An issue was discovered in Webmin <=1.920. The parameter old in password_change.
2019-08-16 CVE-2019-15107 critical CVE-2019-15107: An issue was discovered in Webmin <=1.920. The parameter old in password_change.
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.60
widely condemned
cooey ↗severe-fallout-0.70
widely condemned
"The parameter old in password_change.cgi contains a command injection vulnerability."