Unauthorized File Access Vulnerability in Webmin by Cloud Computing Solutions

CVE-2012-2983

What is CVE-2012-2983?

The vulnerability in Webmin arises from the file/edit_html.cgi component, where the lack of an authorization check allows remote attackers to access unedited contents of any file. This oversight can lead to unauthorized disclosure of sensitive information. Users of Webmin 1.590 and earlier are particularly at risk, as they could be exploited by providing a manipulated file path, enabling attackers to gain access to critical system files or user data.

References