NetSight
medium6.8

CVE-2018-20882

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).

Impact

cPanel before 74.0.8 allows arbitrary file-write operations in the context of the root account during WHM Force Password Change (SEC-447).

Affected products

VendorProductAffected versions
CpanelCpanel
from 69.9999.122 before 70.0.57
from 73.9980.0 before 74.0.8

Weakness classification

References