Path Traversal in Webmin

CVE-2018-8712

An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data from the local system (using Local File Include) such as the '/etc/shadow' file via a "GET /syslog/save_log.cgi?view=1&file=/etc/shadow" request.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

  • Webmin — versions 1.840, 1.880
  • N/a — versions n/a

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2018-8712?
CVE-2018-8712 is a critical-severity vulnerability in Webmin, classified under Path Traversal. CVSS score: 9.8/10. Published 2018-03-14.
How severe is CVE-2018-8712?
Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2018-8712 known to be exploited?
3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.