Skip to content

CVE-2017-18424 In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).

LowCVSS 3.3 EPSS 0.36%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).

Affected products

ProductAffected versionsFixed in
cpanel >= 60.0.3, < 60.0.45 60.0.45
cpanel >= 62.0.1, < 62.0.27 62.0.27
cpanel >= 64.0.0, < 64.0.33 64.0.33
cpanel >= 66.0.1, < 66.0.2 66.0.2

References