NetSight
medium5.3

CVE-2020-10116

cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541).

Impact

cPanel before 84.0.20 allows attackers to bypass intended restrictions on features and demo accounts via WebDisk UAPI calls (SEC-541).

Affected products

VendorProductAffected versions
CpanelCpanel
from 77.9999.110 before 78.0.45
from 83.9999.115 before 84.0.20

Weakness classification

References