Code injection

IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512...

CVE-2019-4284

IBM Cloud Private 2.1.0 , 3.1.0, 3.1.1, and 3.1.2 could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as another user. IBM X-Force ID: 160512...

CVE-2019-4284

CVE-2019-4284 affects IBM Cloud Private. The vulnerability allows a local privileged user to obtain a sensitive OIDC token that is printed to log files, enabling authentication as another user. Affected versions: IBM Cloud Private 2.1.x, 3.1.0, 3.1.1, 3.1.2. Root cause: leakage of OIDC tokens via...

CVE-2017-18423

In cPanel before 66.0.2, domain log files become readable after log processing SEC-273...

CVE-2017-18426

cPanel before 66.0.2 allows resellers to read other accounts' domain log files SEC-288...

CVE-2017-18423

In cPanel before 66.0.2, domain log files become readable after log processing SEC-273...

Code injection

cPanel before 66.0.2 allows resellers to read other accounts' domain log files SEC-288...

Design/Logic Flaw

In cPanel before 66.0.2, domain log files become readable after log processing SEC-273...

CVE-2017-18426

CVE-2017-18426 affects cPanel prior to 66.0.2. The vulnerability allows resellers to read other accounts’ domain log files, an information-disclosure issue (SEC-288). The connected sources confirm the affected product and scope but do not provide exploit details or a patch/version for remediation...

CVE-2017-18426

cPanel before 66.0.2 allows resellers to read other accounts' domain log files SEC-288...

CVE-2017-18423

In cPanel before 66.0.2, domain log files become readable after log processing SEC-273...

CVE-2017-18412

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

Design/Logic Flaw

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18412

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18412

CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...

Security Bulletin: IBM Cloud Private ingress log files contain sensitive information (CVE-2019-4284)

Summary IBM Cloud Private ingress log files contain sensitive information Vulnerability Details CVEID: CVE-2019-4284 DESCRIPTION: IBM Cloud Private could allow a local privileged user to obtain sensitive OIDC token that is printed to log files, which could be used to log in to the system as anoth...

Cross site scripting

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

CVE-2016-10819

CVE-2016-10819 affects cPanel before 57.9999.54. When cpanellogd rotates user log files, they become world-readable, exposing user logs (classified as a confidentiality impact). The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE listings). Remediation is ...

Unauthorized File Access

Apache Storm Core is vulnerable to unauthorized file read. It exposes HTTP-accessible endpoints on the host's file system, allowing an attacker to read/search log files on the host...