CVE-2018-1000080: Insecure Permissions in Ajenti-Panel
Summary
CVE-2018-1000080: Ajenti version version 2 contains a Insecure Permissions vulnerability in Plugins download that can result in The download of any plugins as being a normal user. Affects ajenti-panel versions 0.10 – 2.2.4. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Ajenti-Panel is a web-based administration panel written in Python that provides a user-friendly interface for managing servers and applications. It allows users to download and install plugins to extend its functionality.
Vulnerability Detail
The Ajenti-Panel version 2 is affected by an Insecure Permissions vulnerability in the Plugins download feature. This vulnerability allows any normal user to download plugins, which should only be accessible to privileged users. By exploiting this vulnerability, an attacker can download and potentially install malicious plugins on the server.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to a patched version of Ajenti-Panel.
Conclusion
The Insecure Permissions vulnerability in Ajenti-Panel version 2 allows normal users to download plugins, potentially leading to the installation of malicious plugins. It is crucial to upgrade to a patched version of Ajenti-Panel to mitigate this risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for ajenti-panel →
FAQ
Ajenti-Panel is a web-based administration panel written in Python that provides a user-friendly interface for managing servers and applications.
This vulnerability allows any normal user to download plugins, potentially leading to the installation of malicious plugins on the server.
To fix this vulnerability, it is recommended to upgrade to a patched version of Ajenti-Panel.
There is no known workaround for this vulnerability. It is essential to apply the recommended fix by upgrading to a patched version of Ajenti-Panel.
For more information about this vulnerability, you can visit the Vulert advisory database at Vulert Scanner.
References
Related vulnerabilities
Recent vulnerabilities recorded for ajenti-panel.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
