CVE Vulnerabilities

CVE-2017-18425

Published: Aug 02, 2019 | Modified: Aug 09, 2019
CVSS 3.x
2.5
LOW
Source:
NVD
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
1.9 LOW
AV:L/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 64.0.0 *
Cpanel Cpanel 58.0.3 *
Cpanel Cpanel 60.0.3 *
Cpanel Cpanel 56.0.1 *
Cpanel Cpanel 66.0.1 *
Cpanel Cpanel 62.0.1 *

References