CVE Vulnerabilities

CVE-2016-10841

Published: Aug 01, 2019 | Modified: Aug 08, 2019
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
2.1 LOW
AV:N/AC:H/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The bin/mkvhostspasswd script in cPanel before 11.54.0.4 discloses password hashes (SEC-73).

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 11.48.0.5 (including) 11.48.5.2 (excluding)
Cpanel Cpanel 11.50.0.4 (including) 11.50.4.3 (excluding)
Cpanel Cpanel 11.51.9999.98 (including) 11.52.2.4 (excluding)
Cpanel Cpanel 11.54.0.0 (including) 11.54.0.4 (excluding)

References