Skip to content

CVE-2016-10786 cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).

MediumCVSS 6.5 EPSS 0.88%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

cPanel before 60.0.25 allows members of the nobody group to read Apache HTTP Server SSL keys (SEC-186).

Affected products

ProductAffected versionsFixed in
cpanel >= 11.54.0.0, < 11.54.0.33 11.54.0.33
cpanel >= 55.9999.61, < 56.0.39 56.0.39
cpanel >= 57.9999.48, < 58.0.37 58.0.37
cpanel >= 59.9999.58, < 60.0.25 60.0.25

References