CVE-2019-14409

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...

CVE-2019-14409

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...

CVE-2019-14409

CVE-2019-14409 affects cPanel prior to 78.0.2. The issue allows arbitrary file-read via Passenger adminbin, causing information disclosure. Root cause: flaw in how Passenger adminbin handles file access. Impact: partial confidentiality loss with local access. Mitigation: upgrade to cPanel 78.0.2 ...