CVE-2017-18383: High severity cpanel vulnerability
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·12:20 PM
Data Sourced
via MITRE·12:20 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18383?
The severity of CVE-2017-18383 is considered moderate due to the improper handling of backup file locations.
2
How do I fix CVE-2017-18383?
To fix CVE-2017-18383, upgrade cPanel to version 68.0.15 or later.
3
What versions of cPanel are affected by CVE-2017-18383?
CVE-2017-18383 affects cPanel versions from 61.9999.55 through 68.0.14.
4
What type of vulnerability is CVE-2017-18383?
CVE-2017-18383 is categorized as a path traversal vulnerability related to backup files.
5
Is CVE-2017-18383 a remote exploit?
CVE-2017-18383 can potentially be exploited remotely due to improper backup file location handling.