CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20946

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

Code injection

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20952

CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...

CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20946

cPanel before 68.0.27 exposes zone information because the archive_sync_zones script creates a world‑readable archive. This info disclosure vulnerability is documented across CVE‑2018‑20946 entries (NVD, RH, CNVD, etc.). Impact is information exposure of zones; CVSS v3 score is Low (3.3) with loc...

CVE-2018-20946

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

PT-2019-10388

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.27 Description The issue arises from the creation of world-readable files during the use of the WHM Apache Includes Editor. Recommendations For versions prior to 68.0.27, update to version 68.0.27 or later to...

CVE-2018-20946: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

CVE-2018-20952: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

PT-2019-10381

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read zone information due to a world-readable archive created by the archive sync zones script. Recommendations: For versions prior to 68.0.27, update to version...

PT-2019-7615

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 57.9999.54 Description The issue affects user log files in cPanel, making them world-readable when rotated by cpanellogd. Recommendations For versions prior to 57.9999.54, update to version 57.9999.54 or later to resol...

CVE-2016-10819: Insertion of Sensitive Information into Log File

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

Insecure Path Defaults

OpenSSL has Insecure Path Defaults. When installed on a Windows machine, the default OPENSSLDIR is C:/usr/local which is world writable. This allows an attacker to modify OpenSSL's default configuration, insert CA certificates, modify or even replace existing engine modules, etc...

UBUNTU-CVE-2018-20871

In Univa Grid Engine before 8.6.3, when configured for Docker jobs and execd spooling on rootsquash, weak file permissions "other" write access occur in certain cases GE-6890...

CVE-2019-1552

OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This directory is most commonly referred to as OPENSSLDIR, and is configurable with the --prefix / --openssldir configuration options. For OpenSSL versio...

CVE-2019-14395

cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log SEC-494...

CVE-2019-14395

CVE-2019-14395 affects cPanel before 80.0.5, where the Queueprocd log used world-readable permissions, enabling potential information disclosure. Root cause: improper file permissions on the log, leading to exposure of sensitive data. Remediation: upgrade to cPanel 80.0.5 or later (as per vendor ...

CVE-2019-14395: Incorrect Permission Assignment for Critical Resource

cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log SEC-494...

PT-2019-13664

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.5 Description The issue concerns the use of world-readable permissions for the Queueprocd log. Recommendations For versions prior to 80.0.5, update to version 80.0.5 or later to resolve the issue...