medium4.8
CVE-2017-18407
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279).
Impact
cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 59.9999.58 before 60.0.48 from 61.9999.55 before 62.0.30 from 63.9999.74 before 64.0.40 from 65.9999.38 before 66.0.23 from 67.9999.64 before 67.9999.103 |