2838 matches found
CVE-2017-18412
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18391
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
Design/Logic Flaw
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18391
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18391
CVE-2017-18391 affects cPanel prior to 68.0.15, where backup files can be read during a short window because they are world-readable (SEC-323). The root cause is improper file permissions exposing backups locally. Affected product: cPanel/WHM (before 68.0.15). Impact: disclosure of backup data; s...
CVE-2017-18412: Insertion of Sensitive Information into Log File
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...
CVE-2017-18391: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...
CVE-2017-18424: Exposure of Sensitive Information to an Unauthorized Actor
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...
CVE-2017-18428: Exposure of Sensitive Information to an Unauthorized Actor
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...
PT-2019-8359
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns the Apache HTTP Server configuration file, which becomes world-readable when rebuilt. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the...
PT-2019-8347
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue arises from mishandling during an account rename, which causes Apache HTTP Server log files to become world-readable. Recommendations For versions prior to 67.9999.103, update to versi...
PT-2019-8326
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows attackers to read backup files because they are world-readable during a short time interval. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to...
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
Cross site scripting
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...
CVE-2016-10819
CVE-2016-10819 affects cPanel before 57.9999.54. When cpanellogd rotates user log files, they become world-readable, exposing user logs (classified as a confidentiality impact). The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE listings). Remediation is ...
CVE-2018-20952
cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...