Design/Logic Flaw

2019-08-0113:15:00

PRIOn knowledge base

www.prio-n.com

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

cPanel before 74.0.8 allows local users to disable the ClamAV daemon (SEC-409).

CPENameOperatorVersion
cpanelge69.9999.122
cpanellt70.0.57
cpanelge73.9980.0
cpanellt74.0.8

Name	Operator	Version
cpanel	ge	69.9999.122
cpanel	lt	70.0.57
cpanel	ge	73.9980.0
cpanel	lt	74.0.8

References

documentation.cpanel.net/display/CL/74+Change+Log

news.cpanel.com/cpanel-tsr-2018-0005-full-disclosure/