{"id":"CVE-2022-0824","published":"2022-03-02T00:00:00Z","modified":"2024-08-02T23:40:04Z","title":"Improper Access Control to Remote Code Execution in webmin/webmin","vendor":"webmin","product":"webmin/webmin","tier":"core","eol":null,"affectedVersions":[{"vendor":"webmin","product":"webmin/webmin","versions":[">= unspecified, < 1.990"]}],"description":{"text":"Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is an improper access control weakness in the webmin/webmin repository (Webmin, from the webmin vendor) that can lead to remote code execution. An attacker with network access and low-privileged credentials can exploit it without user interaction to gain code execution, with high confidentiality and integrity impact and limited availability impact.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:13:03Z"},"cvss":{"score":8.3,"severity":"HIGH","version":"3.0","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.96977,"percentile":0.99889,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-284","name":"Improper Access Control"}],"references":[{"url":"https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295","tags":[]},{"url":"https://github.com/webmin/webmin/commit/39ea464f0c40b325decd6a5bfb7833fa4a142e38","tags":[]},{"url":"http://packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html","tags":[]},{"url":"https://notes.netbytesec.com/2022/03/webmin-broken-access-control-to-post-auth-rce.html","tags":[]},{"url":"http://packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.html","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2022-15872","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-15872","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":50809,"url":"https://www.exploit-db.com/exploits/50809","title":"Webmin 1.984 - Remote Code Execution (Authenticated)","type":"webapps","platform":"linux","date":"2022-03-09","verified":false,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2022-03-09"},"pocGithub":{"count":4,"skipped":0,"earliest":"2022-03-06","earliestUrl":"https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell","repos":[{"name":"faisalfs10x/Webmin-CVE-2022-0824-revshell","url":"https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell","stars":112,"created":"2022-03-06"},{"name":"pizza-power/golang-webmin-CVE-2022-0824-revshell","url":"https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell","stars":3,"created":"2022-10-17"},{"name":"gokul-ramesh/WebminRCE-exploit","url":"https://github.com/gokul-ramesh/WebminRCE-exploit","stars":0,"created":"2022-11-08"},{"name":"NUDTTAN91/Webmin-CVE-2022-0824-Enhanced-Exploit","url":"https://github.com/NUDTTAN91/Webmin-CVE-2022-0824-Enhanced-Exploit","stars":0,"created":"2025-08-05"}]},"metasploit":[{"name":"Webmin File Manager RCE","module":"exploit/linux/http/webmin_file_manager_rce","type":"exploit","disclosureDate":"2022-02-26","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb"}],"nuclei":[{"id":"CVE-2022-0824","name":"Webmin <1.990 - Improper Access Control","severity":"high","path":"http/cves/2022/CVE-2022-0824.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0824.yaml"}],"first":{"date":"2022-02-26","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/166240/Webmin-1.984-Remote-Code-Execution.html","http://packetstormsecurity.com/files/169700/Webmin-1.984-File-Manager-Remote-Code-Execution.html"],"flow":[],"timeline":[{"date":"2022-02-26","kind":"exploit-public","label":"First public exploit: Metasploit; later: PoC-in-GitHub 2022-03-06, Exploit-DB 2022-03-09","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb","provenance":"source"},{"date":"2022-03-02","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2022-0824","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":30.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.98,"detail":"percentile 0.9989"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 2 NVD exploit links; 4 PoC-in-GitHub repos; 1 Metasploit module; 1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.81,"detail":"base score 8.3"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}