CVE-2023-0391

概要

参考情報

• bleepingcomputer.com/news/security/cloudpanel-installations-use-the-same-ssl-certificate-private-key · Exploit
• rapid7.com/blog/post/2023/03/21/cve-2023-0391-mgt-commerce-cloudpanel-shared-certificate-vulnerability-and-weak-installation-procedures · Exploit

cloudpanel のその他の脆弱性

• CVE-2024-24320高 8.8Directory Traversal vulnerability in Mgt-commerce CloudPanel v.2.0.0 thru v.2.4.0 allows a remote attacker to obtain sensitive information a…
• CVE-2023-46157高 8.8File-Manager in MGT CloudPanel 2.0.0 through 2.3.2 allows the lowest privilege user to achieve OS command injection by changing file ownersh…
• CVE-2023-36630高 8.8In CloudPanel before 2.3.1, insecure file upload leads to privilege escalation and authentication bypass.
• CVE-2023-35885緊急 9.8CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.
• CVE-2023-33747高 7.8CloudPanel v2.2.2 allows attackers to execute a path traversal.