CVE-2017-18410: Input Validation
Published Aug 2, 2019
·Updated
In cPanel before 67.9999.103, a user account's backup archive could contain all MySQL databases on the server (SEC-284).
Affected Software
6 affected components
Cpanel Cpanel>=55.9999.61<56.0.52
Cpanel Cpanel>=59.9999.58<60.0.48
Cpanel Cpanel>=61.9999.55<62.0.30
Cpanel Cpanel>=63.9999.74<64.0.40
Cpanel Cpanel>=65.9999.38<66.0.23
Cpanel Cpanel>=67.9999.64<67.9999.103
Event History
Aug 2, 2019
CVE Published
via MITRE·01:49 PM
Data Sourced
via MITRE·01:49 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18410?
CVE-2017-18410 has a moderate severity level due to the potential exposure of sensitive MySQL database backups.
2
How do I fix CVE-2017-18410?
To fix CVE-2017-18410, update cPanel to version 68 or later.
3
What impact does CVE-2017-18410 have on my cPanel environment?
CVE-2017-18410 may allow unauthorized access to all MySQL databases through a user account's backup archive.
4
Which versions of cPanel are affected by CVE-2017-18410?
CVE-2017-18410 affects cPanel versions prior to 67.9999.103.
5
Is CVE-2017-18410 a widespread issue?
CVE-2017-18410 is significant in shared hosting environments where user accounts can expose sensitive data.