medium6.5
CVE-2016-10852
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
Impact
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 11.48.0.5 before 11.48.5.2 from 11.50.0.4 before 11.50.4.3 from 11.51.9999.98 before 11.52.2.4 from 11.54.0.0 before 11.54.0.4 |