Webmin Webmin

What it is

An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability.

What to do

Apply updates per vendor instructions.

Vendor notices and references

• nvd.nist.gov/vuln/detail/CVE-2019-15107

Description and required action as published by CISA. Full record at NVD.