CVE-2019-20491

cPanel before 82.0.18 allows attackers to leverage virtual mail accounts in order to bypass account suspensions SEC-508...

CVE-2019-20491

CVE-2019-20491 concerns cPanel prior to 82.0.18 where an attacker can leverage virtual mail accounts to bypass account suspensions (SEC-508). This is the explicit vulnerability described in multiple sources. The linked Red Hat/CNVD/etc. entries corroborate the same issue. Impact is that a bypass ...

PT-2020-10473

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.18 Description The issue allows attackers to leverage virtual mail accounts to bypass account suspensions. Recommendations For versions prior to 82.0.18, update to version 82.0.18 or later to resolve the issue...

Code injection

cPanel before 70.0.23 does not prevent e-mail account suspensions from being applied to unowned accounts SEC-411...

PT-2019-10368

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue concerns the application of e-mail account suspensions to unowned accounts. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...