Vulnerability in Webmin

CVE-2002-1947

Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.

EPSS: 0.014 (69.4th percentile) — read the EPSS interpretation.

Affected products

  • Webmin — versions 0.21, 0.22, 0.31
  • N/a — versions n/a

References