NetSight
critical9.8

CVE-2019-20498

cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534).

Impact

cPanel before 82.0.18 allows WebDAV authentication bypass because the connection-sharing logic is incorrect (SEC-534).

Affected products

VendorProductAffected versions
CpanelCpanel
from 77.9999.110 before 78.0.43
from 81.9999.242 before 82.0.18
from 83.9999.115 before 84.0.10

References