—

PYSEC-2018-113

Details

Ajenti version 2 contains an Information Disclosure vulnerability in Line 176 of the code source that can result in user and system enumeration as well as data from the /etc/ajenti/config.yml file. This attack appears to be exploitable via network connectivity to the web application.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/ajenti-panel

Introduced in: 0

No fixed version published yet for ajenti-panel (pip). Pin to a known-safe version or switch to an alternative.

References

https://medium.com/stolabs/security-issues-on-ajenti-d2b7526eaeee[WEB]
https://pypi.org/project/ajenti-panel[PACKAGE]
https://nvd.nist.gov/vuln/detail/CVE-2018-1000126[ADVISORY]