cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).
Weakness
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cpanel | Cpanel | 69.9999.122 (including) | 70.0.53 (excluding) |
| Cpanel | Cpanel | 71.9980.30 (including) | 72.0.10 (excluding) |
| Cpanel | Cpanel | 73.9980.0 (including) | 74.0.0 (excluding) |