First published: Thu Aug 01 2019(Updated: )
cPanel before 11.54.0.4 lacks ACL enforcement in the AppConfig subsystem (SEC-85).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cpanel Cpanel | >=11.48.0.5<11.48.5.2 | |
Cpanel Cpanel | >=11.50.0.4<11.50.4.3 | |
Cpanel Cpanel | >=11.51.9999.98<11.52.2.4 | |
Cpanel Cpanel | >=11.54.0.0<11.54.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-10852 is considered a medium severity vulnerability due to its potential impact on system access control.
To fix CVE-2016-10852, upgrade your cPanel installation to version 11.54.0.4 or later.
CVE-2016-10852 affects cPanel versions prior to 11.54.0.4 including various versions within the ranges specified.
CVE-2016-10852 exploits a lack of ACL enforcement in the AppConfig subsystem of cPanel.
Check your cPanel version; if it is below 11.54.0.4, you are vulnerable to CVE-2016-10852.