CVE Vulnerabilities

CVE-2018-20886

Insecure Storage of Sensitive Information

Published: Aug 01, 2019 | Modified: Aug 24, 2020
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

cPanel before 74.0.0 insecurely stores phpMyAdmin session files (SEC-418).

Weakness

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Affected Software

Name Vendor Start Version End Version
Cpanel Cpanel 69.9999.122 (including) 70.0.53 (excluding)
Cpanel Cpanel 71.9980.30 (including) 72.0.10 (excluding)
Cpanel Cpanel 73.9980.0 (including) 74.0.0 (excluding)

References