CVE-2017-18393: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 does not block a username of postmaster, which might allow reception of private e-mail (SEC-326).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·01:04 PM
Data Sourced
via MITRE·01:04 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18393?
CVE-2017-18393 has a moderate severity level due to its potential to expose private email communications.
2
How do I fix CVE-2017-18393?
To fix CVE-2017-18393, upgrade to cPanel version 68.0.15 or later.
3
What software is affected by CVE-2017-18393?
CVE-2017-18393 affects cPanel versions prior to 68.0.15, including versions 61, 62, 63, 64, 65, 66, and 67.
4
Can CVE-2017-18393 lead to data loss?
Yes, CVE-2017-18393 can lead to data loss by allowing the interception of private email messages.
5
What is the impact of CVE-2017-18393 on cPanel users?
The impact of CVE-2017-18393 on cPanel users is the potential unauthorized access to sensitive email accounts.