Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.
2002-12-31T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 6.4 (MEDIUM)
AV:N/AC:L/Au:N/C:P/I:P/A:N
10.0
4.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | webmin | webmin | 0.21 | Yes |
| Application | webmin | webmin | 0.22 | Yes |
| Application | webmin | webmin | 0.31 | Yes |
| Application | webmin | webmin | 0.41 | Yes |
| Application | webmin | webmin | 0.42 | Yes |
| Application | webmin | webmin | 0.51 | Yes |
| Application | webmin | webmin | 0.76 | Yes |
| Application | webmin | webmin | 0.77 | Yes |
| Application | webmin | webmin | 0.78 | Yes |
| Application | webmin | webmin | 0.79 | Yes |
| Application | webmin | webmin | 0.80 | Yes |
| Application | webmin | webmin | 0.85 | Yes |
| Application | webmin | webmin | 0.88 | Yes |
| Application | webmin | webmin | 0.91 | Yes |
| Application | webmin | webmin | 0.92 | Yes |
| Application | webmin | webmin | 0.93 | Yes |
| Application | webmin | webmin | 0.94 | Yes |
| Application | webmin | webmin | 0.95 | Yes |
| Application | webmin | webmin | 0.96 | Yes |
| Application | webmin | webmin | 0.97 | Yes |
| Application | webmin | webmin | 0.98 | Yes |
| Application | webmin | webmin | 0.99 | Yes |
| Application | webmin | webmin | 1.0.00 | Yes |