2 matches found
CVE-2017-18480
cPanel before 62.0.4 does not enforce account ownership for hasmycnfforcpuser WHM API calls SEC-210...
6.5CVSS7AI score0.00875EPSS
SaveExploits0References1
CVE-2017-18480
CVE-2017-18480 affects cPanel/WHM: prior to 62.0.4, has_mycnf_for_cpuser API calls do not enforce account ownership, per SEC-210. Root cause is missing ownership checks in those WHM API calls. Impact as stated: potential exposure of sensitive configuration data via API calls; CVSS v3 vector indic...
6.5CVSS6.5AI score0.00875EPSS
SaveExploits0References1Affected Software1
20