NetSight
low2.5

CVE-2017-18425

In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).

Impact

In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).

Affected products

VendorProductAffected versions
CpanelCpanel
from 56.0.1 before 56.0.51
from 58.0.3 before 58.0.52
from 60.0.3 before 60.0.45
from 62.0.1 before 62.0.27
from 64.0.0 before 64.0.33
from 66.0.1 before 66.0.2

Weakness classification

References