CVE Vulnerabilities

CVE-2017-18479

Improper Certificate Validation

Published: Aug 05, 2019 | Modified: Aug 12, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

In cPanel before 62.0.4, WHM SSL certificate generation uses an unreserved e-mail address (SEC-209).

Weakness

The product does not validate, or incorrectly validates, a certificate.

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 11.54.0.0 (including) 11.54.0.36 (excluding)
Cpanel Cpanel 55.9999.61 (including) 56.0.43 (excluding)
Cpanel Cpanel 57.9999.48 (including) 58.0.43 (excluding)
Cpanel Cpanel 59.9999.58 (including) 60.0.35 (excluding)
Cpanel Cpanel 61.9999.55 (including) 62.0.4 (excluding)

Potential Mitigations

References