NetSight
low3.3

CVE-2018-20939

cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339).

Impact

cPanel before 68.0.27 allows a user to discover contents of directories (that are not owned by that user) by leveraging backups (SEC-339).

Affected products

VendorProductAffected versions
CpanelCpanel
from 61.9999.55 before 62.0.39
from 65.9999.38 before 66.0.35
from 67.9999.64 before 68.0.27

Weakness classification

References