Design/Logic Flaw

2019-08-0713:15:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.4%

cPanel before 58.0.4 allows a file-ownership change (to nobody) via rearrangeacct (SEC-134).

CPENameOperatorVersion
cpanelge55.9999.61
cpanellt56.0.27
cpanelge57.9999.48
cpanellt58.0.4

Name	Operator	Version
cpanel	ge	55.9999.61
cpanel	lt	56.0.27
cpanel	ge	57.9999.48
cpanel	lt	58.0.4

References

documentation.cpanel.net/display/CL/58+Change+Log