CVE-2017-18412

FAIBLE 2.5CVE-2017-18412 · Published 02/08/2019 · updated 17/06/2026

En bref

CVE-2017-18412 est une vulnérabilité FAIBLE (CVSS 2.5) touchant cpanel (cpanel).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.29%, plus élevée que 22.0% des vulnérabilités.
Correctif : mettre à jour vers 56.0.52, 60.0.48, 62.0.30, 64.0.40 ou plus récent.

Package	Affected versions	Patched versions
cpanel cpanel	`≥ 55.9999.61, < 56.0.52≥ 59.9999.58, < 60.0.48≥ 61.9999.55, < 62.0.30≥ 64.0.0, < 64.0.40≥ 65.9999.38, < 66.0.23≥ 67.9999.64, < 67.9999.103`	`56.0.5260.0.4862.0.3064.0.4066.0.2367.9999.103`

cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 55.9999.61, < 56.0.52≥ 59.9999.58, < 60.0.48≥ 61.9999.55, < 62.0.30≥ 64.0.0, < 64.0.40≥ 65.9999.38, < 66.0.23≥ 67.9999.64, < 67.9999.103

56.0.5260.0.4862.0.3064.0.4066.0.2367.9999.103

Autres vulnérabilités de cpanel

Tout voir →