CVE-2017-18429

In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...

Code injection

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18429

In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...

CVE-2017-18428

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

Design/Logic Flaw

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18412

CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...

CVE-2017-18412

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18429: Undefined Security Weakness

In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...

PT-2019-8359

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns the Apache HTTP Server configuration file, which becomes world-readable when rebuilt. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the...

PT-2019-8363

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue arises from Apache HTTP Server domlogs becoming temporarily world-readable during log processing. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve...

CVE-2017-18428: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

PT-2019-8364

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns the persistence of Apache HTTP Server SSL domain logs on disk after an account termination. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resol...

CVE-2017-18424: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

PT-2019-8347

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue arises from mishandling during an account rename, which causes Apache HTTP Server log files to become world-readable. Recommendations For versions prior to 67.9999.103, update to versi...

CVE-2018-20932

cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains SEC-406...

CVE-2018-20932

CVE-2018-20932 affects cPanel before 70.0.23. The issue arises when certain domains are created, causing exposure of Apache HTTP Server logs and resulting in potential information disclosure. The primary reference is SEC-406. Exploitation status and concrete fixes are not provided in the connecte...

CVE-2018-20885

cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation SEC-416...

Command injection

cPanel before 74.0.0 allows Apache HTTP Server configuration injection because of DocumentRoot variable interpolation SEC-416...

CVE-2018-20885

CVE-2018-20885 affects cPanel prior to 74.0.0 and is caused by Apache HTTP Server configuration injection due to DocumentRoot variable interpolation (SEC-416). The available documents identify the affected product version and the vulnerability class but do not provide details on exploitation atte...