2348 matches found
Design/Logic Flaw
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
Design/Logic Flaw
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
CVE‑2017‑18461 affects cPanel prior to 62.0.17, where security policy questions are not preserved across an account rename (SEC‑223). The NVD entry lists CVSS‑v3 base 4.3 (NETWORK, HIGH? actually LOW; see vector) and CVSS‑v2 base 5.0, with impact: integrity Low, otherwise None; exploitability low...
CVE-2017-18453
CVE-2017-18453 affects cPanel prior to 64.0.21. The issue is that supplemental groups are not preserved across account renames, as described in the SEC-260 entry. The connected sources consistently identify this as a behavior/version issue rather than a component-level defect with documented expl...
CVE-2017-18449
CVE-2017-18449 affects cPanel prior to 64.0.21. The issue enables certain file-rename operations in the context of the root account via scripts/convert_roundcube_mysql2sqlite (SEC-254). The vulnerability is caused by insufficient validation of file rename actions within the specified script path,...
CVE-2017-18449
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
Design/Logic Flaw
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18412
CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18449: Improper Input Validation
cPanel before 64.0.21 allows certain file-rename operations in the context of the root account via scripts/convertroundcubemysql2sqlite SEC-254...
PT-2019-8396
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 62.0.17 Description The issue does not preserve security policy questions across an account rename. Recommendations For versions prior to 62.0.17, update to version 62.0.17 or later to resolve the issue...
PT-2019-8384
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue allows certain file-rename operations in the context of the root account via scripts/convert roundcube mysql2sqlite. Recommendations For versions prior to 64.0.21, update to version 64.0.2...
CVE-2017-18412: Insertion of Sensitive Information into Log File
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18461: Improper Input Validation
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18453: Improper Input Validation
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
PT-2019-8388
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 64.0.21 Description The issue concerns the preservation of supplemental groups across account renames. Recommendations For versions prior to 64.0.21, update to version 64.0.21 or later to resolve the issue...
PT-2019-8347
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue arises from mishandling during an account rename, which causes Apache HTTP Server log files to become world-readable. Recommendations For versions prior to 67.9999.103, update to versi...