Description
cPanel before 67.9999.103 allows Apache HTTP Server log files to become world-readable because of mishandling on an account rename (SEC-296).
References (2)
Core 2
Core References
Vendor Advisory
https://news.cpanel.com/cpanel-tsr-2017-0005-full-disclosure/
Product, Release Notes x_refsource_confirm
https://documentation.cpanel.net/display/CL/68+Change+Log
Scores
CVSS v3
2.5
EPSS
0.0007
EPSS Percentile
20.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Details
CWE
CWE-532
Status
published
Products (1)
cpanel/cpanel
55.9999.61 - 56.0.52
Published
Aug 02, 2019
Tracked Since
Feb 18, 2026