NetSight
medium6.3

CVE-2017-18389

cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).

Impact

cPanel before 68.0.15 allows string format injection in dovecot-xaps-plugin (SEC-318).

Affected products

VendorProductAffected versions
CpanelCpanel
from 63.9999.74 before 64.0.42
from 65.9999.38 before 66.0.34
from 67.9999.64 before 68.0.15

Weakness classification

References