Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Webmin 1.140 lets remote users read config data

CVE-2004-0582 · published 22 years ago
Summary

Webmin version 1.140 can be tricked into ignoring its own access rules, allowing someone on the network to view configuration details of a module. This could expose settings that help an attacker plan further actions. Upgrade to a newer Webmin release or apply the vendor’s patch to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
webmin webmin 1.1.40
cpe:2.3:a:webmin:webmin:1.1.40:*:*:*:*:*:*:*
Original advisory text
Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module.
Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published6 Aug 2004
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2004-0582 · NVD
Track software like this
Free during beta