PT-2019-8347

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 67.9999.103 Description The issue arises from mishandling during an account rename, which causes Apache HTTP Server log files to become world-readable. Recommendations For versions prior to 67.9999.103, update to versi...

CVE-2017-18428: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing SEC-290...

CVE-2017-18424: Exposure of Sensitive Information to an Unauthorized Actor

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt SEC-274...

CVE-2017-18391: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.15 allows attackers to read backup files because they are world-readable during a short time interval SEC-323...

CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

Cross site scripting

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

CVE-2016-10819

In cPanel before 57.9999.54, user log files become world-readable when rotated by cpanellogd SEC-125...

CVE-2016-10819

CVE-2016-10819 affects cPanel before 57.9999.54. When cpanellogd rotates user log files, they become world-readable, exposing user logs (classified as a confidentiality impact). The vulnerability is described consistently across multiple sources (NVD, Red Hat, CNVD, CVE listings). Remediation is ...

CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20946

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

Code injection

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20952

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20952

CVE-2018-20952 affects cPanel prior to 68.0.27. The issue involves world-readable files created during use of the WHM Apache Includes Editor (SEC-388). The public description confirms the vulnerable state; no exploitation details are provided in the supplied documents. Remediation appears to be u...

CVE-2018-20946

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...

CVE-2018-20946

cPanel before 68.0.27 exposes zone information because the archive_sync_zones script creates a world‑readable archive. This info disclosure vulnerability is documented across CVE‑2018‑20946 entries (NVD, RH, CNVD, etc.). Impact is information exposure of zones; CVSS v3 score is Low (3.3) with loc...

PT-2019-10388

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 68.0.27 Description The issue arises from the creation of world-readable files during the use of the WHM Apache Includes Editor. Recommendations For versions prior to 68.0.27, update to version 68.0.27 or later to...

PT-2019-10381

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 68.0.27 Description: The issue allows attackers to read zone information due to a world-readable archive created by the archive sync zones script. Recommendations: For versions prior to 68.0.27, update to version...

CVE-2018-20952: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 creates world-readable files during use of WHM Apache Includes Editor SEC-388...

CVE-2018-20946: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 68.0.27 allows attackers to read zone information because a world-readable archive is created by the archivesynczones script SEC-355...