CVE-2019-15641: XEE
First published: Mon Aug 26 2019(Updated: )
xmlrpc.cgi in Webmin through 1.930 allows authenticated XXE attacks. By default, only root, admin, and sysadm can access xmlrpc.cgi.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Webmin Webmin | <=1.930 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2019-15641?
CVE-2019-15641 is a vulnerability in Webmin that allows authenticated XXE attacks.
What is the severity of CVE-2019-15641?
CVE-2019-15641 has a severity rating of 6.5 (medium).
How does CVE-2019-15641 affect Webmin?
CVE-2019-15641 allows authenticated XXE attacks in Webmin versions up to 1.930.
Who can access xmlrpc.cgi by default in Webmin?
By default, only root, admin, and sysadm can access xmlrpc.cgi in Webmin.
Is there a fix for CVE-2019-15641?
To fix CVE-2019-15641, upgrade Webmin to a version above 1.930.
- collector/nvd-index
- vendor/webmin
- canonical/webmin webmin
- version/webmin webmin/1.930