PT-2019-6792

Name of the Vulnerable Software and Affected Versions Python keyring lib versions prior to 0.10 Description The issue concerns the Python keyring library, where versions before 0.10 created keyring files with world-readable permissions. This could potentially expose sensitive information...

CVE-2012-5577: Incorrect Default Permissions

Python keyring lib before 0.10 created keyring files with world-readable permissions...

CVE-2016-9590

An information-disclosure flaw was discovered in Red Hat OpenStack Platform director's installation of Object Storage swift. During installation, the Puppet script responsible for deploying the service incorrectly removes and recreates the proxy-server.conf file with world-readable permissions...

CVE-2017-12167

It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...

CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

CVE-2017-18428

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18428

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

CVE-2017-18424

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

CVE-2017-18412

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

Design/Logic Flaw

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18412

CVE-2017-18412 affects cPanel before 67.9999.103, where mishandling during an account rename allows Apache HTTP Server log files to become world-readable (information disclosure). Root cause: improper access control on log files. Impact is limited to partial confidentiality breach as described; n...

CVE-2017-18412

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

CVE-2017-18391

cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...

Design/Logic Flaw

cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...

CVE-2017-18391

CVE-2017-18391 affects cPanel prior to 68.0.15, where backup files can be read during a short window because they are world-readable (SEC-323). The root cause is improper file permissions exposing backups locally. Affected product: cPanel/WHM (before 68.0.15). Impact: disclosure of backup data; s...

CVE-2017-18391

cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...

CVE-2017-18412: Insertion of Sensitive Information into Log File

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename SEC-296...

PT-2019-8326

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.15 Description The issue allows attackers to read backup files because they are world-readable during a short time interval. Recommendations For versions prior to 68.0.15, update to version 68.0.15 or later to...

PT-2019-8359

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 66.0.2 Description The issue concerns the Apache HTTP Server configuration file, which becomes world-readable when rebuilt. Recommendations For versions prior to 66.0.2, update to version 66.0.2 or later to resolve the...