yocto ▾
›
scarthgap ▾
›
vulnerability
›
CVE-2022-0829
Component Overview
Vulnerability Overview
Name
CVE-2022-0829
Source
NVD (
link
)
Debian (
link
)
Description
Improper Authorization in GitHub repository webmin/webmin prior to 1.990.
CWEs
CWE-285
CWE-863
Published Date
Mar 2, 2022
Updated Date
Jun 17, 2026
Workaround
-
Advisories
https://github.com/webmin/webmin/commit/eeeea3c097f5cc473770119f7ac61f1dcfa671b9
Patch
https://huntr.dev/bounties/f2d0389f-d7d1-4f34-9f9d-268b0a0da05e
Exploit
https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html
Exploit
https://github.com/webmin/webmin/commit/eeeea3c097f5cc473770119f7ac61f1dcfa671b9
Patch
https://huntr.dev/bounties/f2d0389f-d7d1-4f34-9f9d-268b0a0da05e
Exploit
https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html
Exploit
Analysis
#
Affected Component
Analysis
webmin
Exploitable
Vulnerability Ratings
#
8.1
CVSSv31
5.4
other
5.5
CVSSv2
Others affected components
#
Name
Project
Project Version
Version
Status
webmin
yocto
kirkstone
1.850
Exploitable
webmin
yocto
master
2.641
Not Affected