Information disclosure

2007-06-2218:30:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.5%

JSON

Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive information via a direct request, which reveals the path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

CPENameOperatorVersion
cpanelle11.4.19
cpaneleq<= 10.9.0build10300

CPE	Name	Operator	Version
	cpanel	le	11.4.19
	cpanel	eq	<= 10.9.0build10300

References

osvdb.org/35861

secunia.com/advisories/25722

www.securityfocus.com/bid/24586

exchange.xforce.ibmcloud.com/vulnerabilities/35009