1809 matches found
CVE-2017-12167
It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...
CVE-2017-18424
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...
CVE-2017-18428
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...
CVE-2017-18424
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...
CVE-2017-18428
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...
CVE-2017-18424
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
Design/Logic Flaw
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18412
CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...
CVE-2017-18391
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
Design/Logic Flaw
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18391
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18391
CVE-2017-18391 affects cPanel prior to 68.0.15, where backup files can be read during a short window because they are world-readable (SEC-323). The root cause is improper file permissions exposing backups locally. Affected product: cPanel/WHM (before 68.0.15). Impact: disclosure of backup data; s...
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
Cross site scripting
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
CVE-2016-10819 affects cPanel before 57.9999.54. When cpanellogd rotates user log files, they become world-readable, exposing user logs (classified as a confidentiality impact). The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE listings). Remediation is ...