CVE Vulnerabilities

CVE-2017-18450

Published: Aug 02, 2019 | Modified: Nov 21, 2024
CVSS 3.x
4.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.x
4.4 MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

cPanel before 64.0.21 allows certain file-chmod operations via /scripts/convert_roundcube_mysql2sqlite (SEC-255).

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 55.9999.61 (including) 56.0.49 (excluding)
Cpanel Cpanel 57.9999.48 (including) 58.0.49 (excluding)
Cpanel Cpanel 59.9999.58 (including) 60.0.43 (excluding)
Cpanel Cpanel 61.9999.55 (including) 62.0.24 (excluding)
Cpanel Cpanel 63.9999.74 (including) 64.0.21 (excluding)

References