CVE-2017-15644: SSRF
Published Oct 19, 2017
·Updated
SSRF exists in Webmin 1.850 via the PATHINFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000.
Affected Software
1 affected component
webmin webmin<=1.850
Remediation
Event History
Oct 19, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-15644?
CVE-2017-15644 has been classified as a medium severity vulnerability due to its potential for Server-Side Request Forgery (SSRF).
2
How do I fix CVE-2017-15644?
Fixing CVE-2017-15644 involves upgrading Webmin to a version later than 1.850 where the vulnerability has been addressed.
3
What are the potential impacts of CVE-2017-15644?
The potential impacts of CVE-2017-15644 include unauthorized access to internal resources and data exposure due to the SSRF vulnerability.
4
Which versions of Webmin are affected by CVE-2017-15644?
All versions of Webmin up to and including 1.850 are affected by CVE-2017-15644.
5
What type of vulnerability is CVE-2017-15644?
CVE-2017-15644 is a Server-Side Request Forgery (SSRF) vulnerability found in Webmin.