Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 8 MGASA-2022-0216 Moderate: Webmin User Privilege Escalation

mageia
Calendar Grey June 3, 2022
Dist Mageia Esm H88
MGASA-2022-0217: New versions of Webmin for Mageia resolve a severe security vulnerability that permitted unauthorized root file access.
Less privileged Webmin users (excluding those created by Virtualmin and Cloudmin) can modify arbitrary files with root privileges, and so run commands as root (CVE-2022-30708)

Summary

Less privileged Webmin users (excluding those created by Virtualmin and Cloudmin) can modify arbitrary files with root privileges, and so run commands as root (CVE-2022-30708).

References

- https://bugs.mageia.org/show_bug.cgi?id=30465

- https://webmin.com/security/

- https://webmin.com/tags/webmin-changelog/

- https://www.cve.org/CVERecord?id=CVE-2022-30708

Topics%20covered

Topics Covered

security advisory file access webmin user privilege mageia

Resolution

SRPMS

- 8/core/webmin-1.994-1.mga8

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 03 Jun 2022
URL: https://advisories.mageia.org/MGASA-2022-0216.html
Type: security
CVE: CVE-2022-30708

Topics%20covered

Topics Covered

security advisory file access webmin user privilege mageia

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here