CVE-2017-18415: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).
Affected Software
6 affected components
Cpanel Cpanel<56.0.52
Cpanel Cpanel>=57.9999.48<60.0.48
Cpanel Cpanel>=61.9999.55<62.0.30
Cpanel Cpanel>=62.0.31<64.0.40
Cpanel Cpanel>=64.0.42<66.0.23
Cpanel Cpanel>=66.0.24<67.9999.103
Event History
Aug 2, 2019
CVE Published
via MITRE·01:53 PM
Data Sourced
via MITRE·01:53 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18415?
CVE-2017-18415 is classified as a high severity vulnerability due to its potential for code execution.
2
How do I fix CVE-2017-18415?
To fix CVE-2017-18415, upgrade cPanel to version 67.9999.103 or later.
3
Which versions of cPanel are affected by CVE-2017-18415?
CVE-2017-18415 affects cPanel versions prior to 67.9999.103 as well as several versions between 56.0.52 and 66.0.23.
4
What type of vulnerability is CVE-2017-18415?
CVE-2017-18415 is a code execution vulnerability caused by incorrect environment-variable filtering.
5
Is my server at risk if it runs an affected version related to CVE-2017-18415?
Yes, servers running affected versions of cPanel are at risk and should be updated immediately to mitigate potential attacks.