medium5.3
CVE-2017-18451
cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).
Impact
cPanel before 64.0.21 allows attackers to read a user's crontab file during a short time interval upon a cPAddon upgrade (SEC-257).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 56.0.1 before 56.0.49 from 58.0.3 before 58.0.49 from 60.0.3 before 60.0.43 from 62.0.1 before 62.0.24 from 64.0.0 before 64.0.21 |