CVE Vulnerabilities

CVE-2017-18480

Published: Aug 05, 2019 | Modified: Aug 12, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 11.54.0.0 (including) 11.54.0.36 (excluding)
Cpanel Cpanel 55.9999.61 (including) 56.0.43 (excluding)
Cpanel Cpanel 57.9999.48 (including) 58.0.43 (excluding)
Cpanel Cpanel 59.9999.58 (including) 60.0.35 (excluding)
Cpanel Cpanel 61.9999.55 (including) 62.0.4 (excluding)

References