CVE-2018-20909

CVE-2018-20909 affects cPanel prior to 70.0.23, where arbitrary file-chmod operations can occur during legacy incremental backups (SEC-338). Multiple sources (NVD, Red Hat advisory, CNVD) confirm the issue and link it to cPanel’s backup handling. The vulnerability arises in the backup process, en...

CVE-2018-20909: Incorrect Permission Assignment for Critical Resource

cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups SEC-338...

PT-2019-10340

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows for arbitrary file-chmod operations during legacy incremental backups. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...