CVE-2018-20932 cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).
LowCVSS 2.7
EPSS 0.70%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cPanel before 70.0.23 exposes Apache HTTP Server logs after creation of certain domains (SEC-406).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cpanel | >= 61.9999.55, < 62.0.42 | 62.0.42 |
| cpanel | >= 67.9999.64, < 68.0.33 | 68.0.33 |
| cpanel | >= 69.9999.122, < 70.0.23 | 70.0.23 |
References
- documentation.cpanel.net release-notes vendor-advisory