VDB

GCVE-110-MAGEIA-2019-237

GCVE-110-MAGEIA-2019-237
Advisory Published
Vulnetix · Advisory published August 31, 2019
Updated webmin package fixes security vulnerability: Webmin before 1.930 allows remote exploits if the option to change expired passwords is enabled (CVE-2019-15107). Note that it is only vulnerable if changing of expired passwords is enabled, which is not the case by default.

Threat Intelligence

Snort Rules (4)

1789583: Webmin password_change.cgi command injection CVE-2019-15107

1157504: WEB_SERVER Webmin RCE CVE-2019-15107

1535776: Webmin password_change.cgi command injection CVE-2019-15107

1162710: Webmin password_change.cgi command injection CVE-2019-15107

Affected Products

VendorProductVersionsPlatforms
Mageiawebmin0 (affected), 1.930-1.mga7 (unaffected)—

Browse GCVE Records

921 records in the GCVE database · Updated October 27, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 50/day Open console ›