CVE-2017-18399: Medium severity cpanel vulnerability
Published Aug 2, 2019
·Updated
cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332).
Affected Software
4 affected components
Cpanel Cpanel>=61.9999.55<62.0.35
Cpanel Cpanel>=63.9999.74<64.0.42
Cpanel Cpanel>=65.9999.38<66.0.34
Cpanel Cpanel>=67.9999.64<68.0.15
Event History
Aug 2, 2019
CVE Published
via MITRE·01:08 PM
Data Sourced
via MITRE·01:08 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18399?
CVE-2017-18399 is classified as a high severity vulnerability due to the potential exposure of sensitive information.
2
How do I fix CVE-2017-18399?
To fix CVE-2017-18399, update cPanel to version 68.0.15 or later.
3
What type of attack is associated with CVE-2017-18399?
CVE-2017-18399 allows attackers to read the root's crontab file, which could lead to further system compromise.
4
Which cPanel versions are affected by CVE-2017-18399?
CVE-2017-18399 affects cPanel versions prior to 68.0.15, specifically versions between 61.9999.55 and 62.0.35, as well as a few others.
5
What is the impact of exploiting CVE-2017-18399?
Exploiting CVE-2017-18399 can provide attackers with unauthorized access to scheduled tasks and sensitive information stored in the crontab.