Total vulnerabilities in the database
Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials.
| Software | From | Fixed in |
|---|---|---|
| webmin / webmin | 0.92 | 0.92.x |
| webmin / webmin | 0.92.1 | 0.92.1.x |