cve/2018/CVE-2018-1000126.md

CVE-2018-1000126

Description

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. This attack appears to be exploitable via network connectivity to the web application.

POC

Reference

• https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee
• https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee

Github

No PoCs found on GitHub currently.