high7.2
CVE-2018-20895
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).
Impact
In cPanel before 71.9980.37, API tokens retain ACLs after those ACLs are removed from the corresponding accounts (SEC-393).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cpanel | Cpanel | from 67.9999.64 before 68.0.39 from 69.9999.122 before 70.0.43 from 71.9980.30 before 71.9980.37 |