18 matches found
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
EUVD-2017-9577
Malware in sbrugna...
EUVD-2017-9528
Malware in sbrugna...
Code injection
cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated SEC-517...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18458
cPanel before 62.0.17 allows file overwrite when renaming an account SEC-219...
Design/Logic Flaw
cPanel before 64.0.21 does not preserve supplemental groups across account renames SEC-260...
Design/Logic Flaw
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18461
CVE‑2017‑18461 affects cPanel prior to 62.0.17, where security policy questions are not preserved across an account rename (SEC‑223). The NVD entry lists CVSS‑v3 base 4.3 (NETWORK, HIGH? actually LOW; see vector) and CVSS‑v2 base 5.0, with impact: integrity Low, otherwise None; exploitability low...
CVE-2017-18461
cPanel before 62.0.17 allows does not preserve security policy questions across an account rename SEC-223...
CVE-2017-18453
CVE-2017-18453 affects cPanel prior to 64.0.21. The issue is that supplemental groups are not preserved across account renames, as described in the SEC-260 entry. The connected sources consistently identify this as a behavior/version issue rather than a component-level defect with documented expl...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
Design/Logic Flaw
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18412
CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...
CVE-2018-20893
Affected software: cPanel. Vulnerability: core issue allows file-rename operations during account renames (SEC-442) prior to version 74.0.0. Root cause details are not expanded beyond this description in the provided documents. Impact: exposes unintended file-rename behavior during account rename...