NetSight
high7.8

CVE-2017-18415

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).

Impact

cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).

Affected products

VendorProductAffected versions
CpanelCpanel
before 56.0.52
from 57.9999.48 before 60.0.48
from 61.9999.55 before 62.0.30
from 62.0.31 before 64.0.40
from 64.0.42 before 66.0.23
from 66.0.24 before 67.9999.103

Weakness classification

References