NetSight
low2.5

CVE-2017-18412

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296).

Impact

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296).

Affected products

VendorProductAffected versions
CpanelCpanel
from 55.9999.61 before 56.0.52
from 59.9999.58 before 60.0.48
from 61.9999.55 before 62.0.30
from 64.0.0 before 64.0.40
from 65.9999.38 before 66.0.23
from 67.9999.64 before 67.9999.103

Weakness classification

References