CVE-2018-1000126

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. This attack appears to be exploitable via network connectivity to the web application.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-03-13

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Ajenti (Ajenti)

References

• https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee