CVE-2002-1947: Webmin

Medium severity, CVSS 6.4. EPSS: 1.4% chance of exploitation in the next 30 days.

Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.

Affected products

• Webmin Webmin: version 0.21 only; version 0.22 only; version 0.31 only; version 0.41 only; version 0.42 only; version 0.51 only; …

Published 2002-12-31. Last modified 2026-06-16.