CVE-2018-1000082 - CVE House
Back to Database
Status published High CVE-2018-1000082

Ajenti version version 2 contains a Cross ite Request Forgery...

Vulnerability Description

Ajenti version version 2 contains a Cross ite Request Forgery (CSRF) vulnerability in the command execution panel of the tool used to manage the server. that can result in Code execution on the server . This attack appear to be exploitable via Being a CSRF, victim interaction is needed, when the victim access the infected trigger of the CSRF any code that match the victim privledges on the server can be executed..

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-1000082

Credits & Attribution

No credits recorded in the NVD database.

References

More from ajenti

View All →
CVE-2018-18548
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13...
Medium 6.1
CVE-2018-1000126
Ajenti version 2 contains an Information Disclosure vulnerability in Line...
High 7.5
CVE-2018-1000083
Ajenti version version 2 contains a Improper Error Handling vulnerability...
Medium 5.3
CVE-2018-1000081
Ajenti version version 2 contains a Input Validation vulnerability in...
High 7.5
CVE-2018-1000080
Ajenti version version 2 contains a Insecure Permissions vulnerability in...
Medium 6.5

Affected Vendor

Affected Software

ajenti
Vulnerable Versions:
2

Timeline

Official Publish: March 13th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.