CVE-2017-18392: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 allows collisions because PostgreSQL databases can be assigned to multiple accounts (SEC-325).
Affected Software
3 affected components
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·01:03 PM
Data Sourced
via MITRE·01:03 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18392?
CVE-2017-18392 is considered a high severity vulnerability due to the possibility of data collisions in PostgreSQL databases.
2
How do I fix CVE-2017-18392?
To fix CVE-2017-18392, upgrade cPanel to version 68.0.15 or later.
3
What versions of cPanel are affected by CVE-2017-18392?
CVE-2017-18392 affects cPanel versions prior to 68.0.15, specifically versions between 63.9999.74 and 64.0.42, 65.9999.38 and 66.0.34, and 67.9999.64 and 68.0.15.
4
What is the impact of CVE-2017-18392?
The impact of CVE-2017-18392 is that multiple cPanel accounts can access the same PostgreSQL database, leading to potential data exposure and integrity issues.
5
Is there any workaround for CVE-2017-18392?
There are no documented workarounds for CVE-2017-18392; the only solution is to update to a secure version.