6153 matches found
Design/Logic Flaw
In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions SEC-207...
CVE-2017-18478
In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions SEC-207...
CVE-2017-18478
Affected software: cPanel prior to 62.0.4. Vulnerability: incorrect ACL checks in xml-api for Rearrange Account actions, caused by an ACL bypass issue. Impact: potential improper access control. Mitigation: upgrade to 62.0.4 or later (as cited by cPanel and related CVE records). Notes: the connec...
CVE-2017-18478: Exposure of Sensitive Information to an Unauthorized Actor
In cPanel before 62.0.4 incorrect ACL checks could occur in xml-api for Rearrange Account actions SEC-207...
PT-2019-8413
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.4 Description The issue is related to incorrect ACL checks in the xml-api for Rearrange Account actions. Recommendations For versions prior to 62.0.4, update to version 62.0.4 or later to resolve the issue...
CVE-2016-10830
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
Authentication flaw
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
CVE-2016-10830
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
CVE-2016-10830
CVE-2016-10830 affects cPanel prior to 55.9999.141. The vulnerability is an ACL bypass in AppConfig applications caused by misuse of magic_revision (SEC-100). This could allow an attacker to bypass access controls, exposing otherwise restricted AppConfig functionality. Exploitation details are no...
CVE-2016-10852
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...
Design/Logic Flaw
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...
CVE-2016-10852
cPanel versions prior to 11.54.0.4 are affected by a lack of ACL enforcement in the AppConfig subsystem (SEC-85). Red Hat and NVD references confirm the issue, affecting cPanel’s AppConfig handling; no explicit exploit details or fix version are provided in the connected documents. The reports de...
CVE-2016-10852
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem SEC-85...
Design/Logic Flaw
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts SEC-393...
CVE-2018-20895: Improper Input Validation
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts SEC-393...
PT-2019-7648
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.4 Description The issue is related to a lack of ACL enforcement in the AppConfig subsystem. This affects a significant number of devices worldwide, although the exact number is not specified. There is no...
CVE-2016-10830: Improper Access Control
cPanel before 55.9999.141 allows ACL bypass for AppConfig applications via magicrevision SEC-100...
PT-2019-7626
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 55.9999.141 Description The issue allows ACL bypass for AppConfig applications. This is achieved via the magic revision parameter. Recommendations For versions prior to 55.9999.141, update to version 55.9999.141 or lat...
CVE-2019-14391
CVE-2019-14391: Affects cPanel prior to 82.0.2 where Reseller package creation ACLs are not properly enforced (SEC-514). Root cause is insufficient ACL enforcement; impact is privilege/permission concerns for reseller package creation. Affected versions: all before 82.0.2. Remediation: upgrade to...