NetSight
high8.1

CVE-2016-10859

cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).

Impact

cPanel before 11.54.0.0 allows unauthorized password changes via Webmail API commands (SEC-65).

Affected products

VendorProductAffected versions
CpanelCpanel
from 11.48.0.5 before 11.48.4.8
from 11.50.0.4 before 11.50.3.1
from 11.51.9999.98 before 11.52.0.23
from 11.52.1.0 before 11.52.1.1

Weakness classification

References