CVE-2018-1000083

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server

published March 13, 2018

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via By sending a malformed JSON, the tool responds with a traceback error that leaks a path of the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01549 · 74.9th percentile
Published
2018-03-13T15:00Z
EPSS history
Timeline
  • 13 MAR 15:00Z
    Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server
    cvelistv5