CVE-2016-10796 cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).
LowCVSS 3.3
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cPanel before 58.0.4 initially uses weak permissions for Apache HTTP Server log files (SEC-130).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cpanel | >= 11.51.9999.98, < 11.52.6.2 | 11.52.6.2 |
| cpanel | >= 11.54.0.0, < 11.54.0.26 | 11.54.0.26 |
| cpanel | >= 55.9999.61, < 56.0.27 | 56.0.27 |
| cpanel | >= 57.9999.48, < 58.0.4 | 58.0.4 |
References
- documentation.cpanel.net release-notes vendor-advisory