CVE-2017-18384: Low severity cpanel vulnerability
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·12:21 PM
Data Sourced
via MITRE·12:21 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18384?
CVE-2017-18384 is classified as a moderate severity vulnerability due to its potential for unauthorized access to files outside of jailed accounts.
2
How do I fix CVE-2017-18384?
To fix CVE-2017-18384, upgrade your cPanel installation to version 68.0.15 or later.
3
What systems are affected by CVE-2017-18384?
CVE-2017-18384 affects cPanel versions prior to 68.0.15, including 61.x, 63.x, 65.x, and 67.x versions.
4
What exploit does CVE-2017-18384 allow?
CVE-2017-18384 allows jailed accounts to restore files that are located outside their designated jail, creating a security risk.
5
Are there any known exploits for CVE-2017-18384?
As of now, there are no publicly available exploits for CVE-2017-18384, but it is recommended to take precautions by updating software.