In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd (SEC-125).
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cpanel | Cpanel | 11.50.0.4 (including) | 11.50.6.2 (excluding) |
| Cpanel | Cpanel | 11.52.6.0 (including) | 11.52.6.1 (excluding) |
| Cpanel | Cpanel | 11.54.0.0 (including) | 11.54.0.24 (excluding) |
| Cpanel | Cpanel | 56.0.1 (including) | 56.0.15 (excluding) |