4118 matches found
CVE-2017-18425
In cPanel before 66.0.2, the cpdavderrorlog file can be created with weak permissions SEC-280...
CVE-2017-18425
In cPanel prior to 66.0.2, the cpdavd_error_log file could be created with weak permissions (SEC-280). This Vulnerability involves the cpdavd_error_log file and stems from weak/insufficient permissions, enabling potential local impact. Affected component: cPanel’s cpdavd_error_log handling. Root ...
CVE-2017-18424
CVE-2017-18424 affects cPanel prior to 66.0.2. When the Apache HTTP Server configuration is rebuilt, the configuration file can become world-readable, exposing potentially sensitive configuration data. Root cause described as an issue in the rebuild process (SEC-274). Red Hat/CNVD/CVE records con...
CVE-2017-18424
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...
CVE-2017-18423
In cPanel before 66.0.2, domain log files become readable after log processing SEC-273...
CVE-2017-18423
In this CVE, affected software is cPanel prior to 66.0.2. The issue causes domain log files to become readable after log processing (SEC-273). The provided documents do not specify the root cause details, affected components beyond the log handling, or a remediation/version fix. No exploitation d...
CVE-2017-18422
In cPanel before 66.0.2, EasyApache 4 conversion sets weak domlog ownership and permissions SEC-272...
CVE-2017-18422
CVE-2017-18422 affects cPanel before 66.0.2. During EasyApache 4 conversion, ownership and permissions for domlog are set weakly, creating a potential partial confidentiality impact. Root cause: misconfigured ownership/permissions in the domlog during EasyApache 4 conversion. Practical impact is ...
CVE-2017-18421
cPanel before 66.0.2 allows demo accounts to create databases and users SEC-271...
CVE-2017-18421
cPanel prior to 66.0.2 contains a vulnerability (SEC-271) that allows demo accounts to create databases and users. Affected: cPanel before 66.0.2. Root cause specifics are not detailed in the provided documents. Impact stated as unauthorized creation/management of databases and users. Remediation...
CVE-2017-18420
cPanel before 66.0.2 allows stored XSS during WHM cPAddons processing SEC-269...
CVE-2017-18420
CVE-2017-18420 affects cPanel before 66.0.2. It is a stored cross-site scripting vulnerability during WHM cPAddons processing (SEC-269). The impact is stored XSS as described; exploitation details are not provided in the documents. A fix/version is not specified in the provided sources, and remed...
CVE-2017-18419
CVE-2017-18419 affects cPanel before 66.0.2. The issue is a stored XSS during WHM cPAddons uninstallation caused by insufficient input validation in the cPAddons uninstall flow. The vulnerability can lead to arbitrary script execution within the context of affected users when the uninstallation U...
CVE-2017-18419
cPanel before 66.0.2 allows stored XSS during WHM cPAddons uninstallation SEC-266...
CVE-2017-18418
cPanel before 66.0.2 allows stored XSS during WHM cPAddons file operations SEC-265...
CVE-2017-18418
CVE-2017-18418 affects cPanel before 66.0.2, enabling stored XSS during WHM cPAddons file operations (SEC-265). The vulnerability is tied to versions prior to 66.0.2; remediation involves upgrading to 66.0.2 or later (per changelogs/references in the connected documents). Exploitation details are...
CVE-2017-18417
CVE-2017-18417 affects cPanel prior to 66.0.2, where stored XSS can occur during WHM cPAddons installation. The vulnerability is tied to the cPAddons installation flow in WHM, enabling injected client-side scripts. Red Hat and CNVD entries corroborate the same issue with versions before 66.0.2. R...
CVE-2017-18417
cPanel before 66.0.2 allows stored XSS during WHM cPAddons installation SEC-263...
