medium5.5
CVE-2017-18405
cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345).
Impact
cPanel before 68.0.15 allows arbitrary file-read operations because of the backup .htaccess modification logic (SEC-345).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 61.9999.55 before 62.0.35 from 63.9999.74 before 64.0.42 from 65.9999.38 before 66.0.34 from 67.9999.64 before 68.0.15 |