CVE-2018-20946

2019-08-0116:14:38

mitre

www.cve.org

3.8 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archive_sync_zones script (SEC-355).

References

documentation.cpanel.net/display/CL/68+Change+Log