NetSight
medium5.4

CVE-2018-20905

cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).

Impact

cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction (SEC-429).

Affected products

VendorProductAffected versions
CpanelCpanel
from 61.9999.55 before 62.0.47
from 67.9999.64 before 68.0.39
from 69.9999.122 before 70.0.43
from 71.9980.30 before 71.9980.37

Weakness classification

References