cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).
Weakness
The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cpanel | Cpanel | 11.50.0.4 (including) | 11.50.5.2 (excluding) |
| Cpanel | Cpanel | 11.51.9999.98 (including) | 11.52.4.1 (excluding) |
| Cpanel | Cpanel | 11.54.0.0 (including) | 11.54.0.20 (excluding) |
| Cpanel | Cpanel | 55.9999.61 (including) | 55.9999.141 (excluding) |