PT-2019-7592

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4 Description The issue is related to weak permissions used for Apache HTTP Server log files. Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue...

CVE-2017-18428

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18429

In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...

CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

Code injection

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18429

In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...

CVE-2017-18429

CVE-2017-18429 affects cPanel before 66.0.2. The issue is that Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291). Several connected sources corroborate the same description, without detailing root cause, exploited vectors, or remediation steps in the pr...

CVE-2017-18428

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18428

CVE-2017-18428 affects cPanel prior to 66.0.2. During log processing, Apache HTTP Server domlogs become temporarily world-readable, exposing potentially sensitive log information. This is caused by the log handling behavior described in SEC-290. The vulnerability is a local issue with information...

CVE-2017-18424

CVE-2017-18424 affects cPanel prior to 66.0.2. When the Apache HTTP Server configuration is rebuilt, the configuration file can become world-readable, exposing potentially sensitive configuration data. Root cause described as an issue in the rebuild process (SEC-274). Red Hat/CNVD/CVE records con...

CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

Design/Logic Flaw

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18412

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18412

CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...

PT-2019-8359

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns the Apache HTTP Server configuration file, which becomes world-readable when rebuilt. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the...

PT-2019-8347

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue arises from mishandling during an account rename, which causes Apache HTTP Server log files to become world-readable. Recommendations For versions prior to 67.9999.103, update to versi...

CVE-2017-18428: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18424: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

CVE-2017-18429: Undefined Security Weakness

In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination SEC-291...

PT-2019-8364

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns the persistence of Apache HTTP Server SSL domain logs on disk after an account termination. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resol...