First published: Fri Aug 02 2019(Updated: )
cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cpanel Cpanel | >=61.9999.55<62.0.35 | |
Cpanel Cpanel | >=63.9999.74<64.0.42 | |
Cpanel Cpanel | >=65.9999.38<66.0.34 | |
Cpanel Cpanel | >=67.9999.64<68.0.15 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2017-18383 is considered moderate due to the improper handling of backup file locations.
To fix CVE-2017-18383, upgrade cPanel to version 68.0.15 or later.
CVE-2017-18383 affects cPanel versions from 61.9999.55 through 68.0.14.
CVE-2017-18383 is categorized as a path traversal vulnerability related to backup files.
CVE-2017-18383 can potentially be exploited remotely due to improper backup file location handling.