An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data from the local system (using Local File Include) such as the '/etc/shadow' file via a "GET /syslog/save_log.cgi?view=1&file=/etc/shadow" request.

A local file inclusion vulnerability exists in Webmin 1.840 and 1.880 when the default Yes setting of 'Can view any file as a log file' is enabled. As a result of weak default configuration settings, limited users have full access rights to the underlying Unix system files, allowing the user to read sensitive data from the local system (using Local File Include) such as the '/etc/shadow' file via a 'GET /syslog/save_log.cgi?view=1&file=/etc/shadow' request.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Webmin install hosted on the remote host is 1.840 or 1.880. It is, therefore, affected by a local file inclusion vulnerability.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its self-reported version, the Webmin install hosted on the remote host is 1.840 or 1.880. It is, therefore, affected by a local file inclusion vulnerability.

ID	Name	Product	Family	Severity
146496	Webmin 1.840 / 1.880 LFI	Nessus	CGI abuses	critical
98673	Webmin 1.840 Local File Inclusion Vulnerability	Web App Scanning	Component Vulnerability	critical
98672	Webmin 1.880 Local File Inclusion Vulnerability	Web App Scanning	Component Vulnerability	critical
108563	Webmin 1.840 / 1.880 Local File Inclusion Vulnerability	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2018-8712

critical

Tenable Plugins

critical

critical

critical

critical