CVE-2017-18428 In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).
LowCVSS 2.5
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In cPanel before 66.0.2, Apache HTTP Server domlogs become temporarily world-readable during log processing (SEC-290).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cpanel | >= 55.9999.61, < 56.0.51 | 56.0.51 |
| cpanel | >= 57.9999.48, < 58.0.52 | 58.0.52 |
| cpanel | >= 59.9999.58, < 60.0.45 | 60.0.45 |
| cpanel | >= 61.9999.55, < 62.0.27 | 62.0.27 |
| cpanel | >= 63.9999.74, < 64.0.33 | 64.0.33 |
| cpanel | >= 65.9999.38, < 66.0.2 | 66.0.2 |
References
- documentation.cpanel.net release-notes vendor-advisory