CVE Vulnerabilities

CVE-2017-18390

Published: Aug 02, 2019 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

cPanel before 68.0.15 allows code execution in the context of the root account because of weak permissions on incremental backups (SEC-322).

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 61.9999.55 (including) 62.0.35 (excluding)
Cpanel Cpanel 63.9999.74 (including) 64.0.42 (excluding)
Cpanel Cpanel 65.9999.38 (including) 66.0.34 (excluding)
Cpanel Cpanel 67.9999.64 (including) 68.0.15 (excluding)

References