Unauthorized Access Vulnerability in 1Panel Linux Server Management Panel
CVE-2024-27288

3.1LOW

Key Information:

Vendor

1panel-dev

Status
1panel
Vendor
CVE Published:
6 March 2024

What is CVE-2024-27288?

1Panel is an open source Linux server operation and maintenance management panel. Prior to version 1.10.1-lts, users can use Burp to obtain unauthorized access to the console page. The vulnerability has been fixed in v1.10.1-lts. There are no known workarounds.

Affected Version(s)

1Panel < 1.10.1-lts

References

https://github.com/1Panel-dev/1Panel/security/advisories/...
x_refsource_CONFIRM
https://github.com/1Panel-dev/1Panel/releases/tag/v1.10.1...
x_refsource_MISC

CVSS V3.1

Score:
3.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.