CVE-2017-18455

LOW

cPanel 55.9999.61-62.0.16 - Unauthenticated Addon Domain Conversion

Title source: llm

In cPanel before 62.0.17, addon domain conversion did not require a package for resellers (SEC-208).

Core 2

Core References

Vendor Advisory

Product, Release Notes x_refsource_confirm

CVSS v3 2.7

EPSS 0.0038

EPSS Percentile 59.7%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

CWE

CWE-264

Status published

Products (1)

cpanel/cpanel 55.9999.61 - 56.0.46

Published Aug 02, 2019

Tracked Since Feb 18, 2026