CVE Vulnerabilities

CVE-2017-18470

Published: Aug 05, 2019 | Modified: Aug 12, 2019
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

cPanel before 62.0.4 has a fixed password for the Munin MySQL test account (SEC-196).

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 11.54.0.0 (including) 11.54.0.36 (excluding)
Cpanel Cpanel 55.9999.61 (including) 56.0.43 (excluding)
Cpanel Cpanel 57.9999.48 (including) 58.0.43 (excluding)
Cpanel Cpanel 59.9999.58 (including) 60.0.35 (excluding)
Cpanel Cpanel 61.9999.55 (including) 62.0.4 (excluding)

References