NetSight
high8.1

CVE-2016-10846

cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

Impact

cPanel before 11.54.0.4 allows arbitrary file-chown and file-chmod operations during Roundcube database conversions (SEC-79).

Affected products

VendorProductAffected versions
CpanelCpanel
from 11.48.0.5 before 11.48.5.2
from 11.50.0.4 before 11.50.4.3
from 11.51.9999.98 before 11.52.2.4
from 11.54.0.0 before 11.54.0.4

Weakness classification

References