CVE-2008-2071: CSRF

Published May 12, 2008

Updated

Multiple cross-site request forgery (CSRF) vulnerabilities in the WHM interface 11.15.0 for cPanel 11.18 before 11.18.4 and 11.22 before 11.22.3 allow remote attackers to perform unauthorized actions as cPanel administrators via requests to cpanel/whm/webmail and other unspecified vectors.

Affected Software

7 affected components

Cpanel Cpanel=11.18

Cpanel Cpanel=11.22

Cpanel Cpanel=11.18.3

Cpanel Cpanel=11.18.1

Cpanel Cpanel=11.22.1

Cpanel Cpanel=11.22.2

Cpanel Cpanel=11.18.2

Event History

May 12, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2071?

CVE-2008-2071 is classified as a high severity vulnerability due to its potential for allowing unauthorized actions by attackers.

How do I fix CVE-2008-2071?

To fix CVE-2008-2071, upgrade to cPanel versions 11.18.4 or later and 11.22.3 or later.

What types of vulnerabilities are present in CVE-2008-2071?

CVE-2008-2071 contains multiple cross-site request forgery (CSRF) vulnerabilities.

Who is affected by CVE-2008-2071?

CVE-2008-2071 affects users of cPanel versions 11.18 before 11.18.4 and 11.22 before 11.22.3.

What actions can attackers perform due to CVE-2008-2071?

Attackers exploiting CVE-2008-2071 can perform unauthorized actions as cPanel administrators via targeted requests.