CVE-2024-36451 - CVE House
Back to Database
Status published Unknown CVE-2024-36451

Improper handling of insufficient permissions or privileges vulnerability exists in...

Vulnerability Description

Improper handling of insufficient permissions or privileges vulnerability exists in ajaxterm module of Webmin prior to 2.003. If this vulnerability is exploited, a console session may be hijacked by an unauthorized user. As a result, data within a system may be referred, a webpage may be altered, or a server may be permanently halted.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-36451

Credits & Attribution

No credits recorded in the NVD database.

References

More from Webmin

View All →
CVE-2025-67738
squid/cachemgr.cgi in Webmin before 2.600 does not properly quote arguments....
High 8.5
CVE-2024-36453
Cross-site scripting vulnerability exists in session_login.cgi of Webmin versions prior...
Unknown 0
CVE-2024-36452
Cross-site request forgery vulnerability exists in ajaxterm module of Webmin...
Unknown 0
CVE-2024-36450
Cross-site scripting vulnerability exists in sysinfo.cgi of Webmin versions prior...
Unknown 0
CVE-2024-12828
Webmin CGI Command Injection Remote Code Execution Vulnerability
Critical 9.9

Affected Vendor

Affected Software

Webmin
Vulnerable Versions:
prior to 2.003

Timeline

Official Publish: July 10th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.