CVE-2017-18423

Published: Aug 2, 2019Modified: Nov 21, 2024

3.3

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.8 / Impact: 1.4

Source: NVD

Description

In cPanel before 66.0.2, domain log files become readable after log processing (SEC-273).

Affected (6)

Products: Cpanel: Cpanel

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cpanel Cpanel	From 56.0.1 to 56.0.51
Cpanel Cpanel	From 58.0.3 to 58.0.52
Cpanel Cpanel	From 60.0.3 to 60.0.45
Cpanel Cpanel	From 62.0.1 to 62.0.27
Cpanel Cpanel	From 64.0.0 to 64.0.33
Cpanel Cpanel	From 66.0.1 to 66.0.2

Related CWEs

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://documentation.cpanel.net/display/CL/66+Change+Log

Source: cve@mitre.org

Release NotesVendor Advisory

https://documentation.cpanel.net/display/CL/66+Change+Log

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.