CVE-2017-18394: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 does not have a sufficient list of reserved usernames (SEC-327).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·01:04 PM
Data Sourced
via MITRE·01:04 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18394?
CVE-2017-18394 is considered a low to medium severity vulnerability that affects cPanel versions prior to 68.0.15.
2
How do I fix CVE-2017-18394?
To fix CVE-2017-18394, upgrade cPanel to version 68.0.15 or later.
3
What does CVE-2017-18394 affect?
CVE-2017-18394 affects cPanel installations due to the lack of a sufficient list of reserved usernames.
4
Who is impacted by CVE-2017-18394?
Users of cPanel versions before 68.0.15 are impacted by CVE-2017-18394.
5
What are the potential consequences of CVE-2017-18394?
The potential consequences of CVE-2017-18394 include unauthorized account creation and vulnerability to username enumeration attacks.