CVE-2017-18421: Low severity cpanel vulnerability
Published Aug 2, 2019
·Updated
cPanel before 66.0.2 allows demo accounts to create databases and users (SEC-271).
Affected Software
4 affected components
Cpanel Cpanel>=60.0.3<60.0.45
Cpanel Cpanel>=62.0.1<62.0.27
Cpanel Cpanel>=64.0.0<64.0.33
Cpanel Cpanel>=66.0.1<66.0.2
Event History
Aug 2, 2019
CVE Published
via MITRE·03:36 PM
Data Sourced
via MITRE·03:36 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18421?
CVE-2017-18421 is categorized as a moderate severity vulnerability.
2
How do I fix CVE-2017-18421?
To mitigate CVE-2017-18421, upgrade cPanel to version 66.0.2 or later.
3
What impact does CVE-2017-18421 have on cPanel demo accounts?
CVE-2017-18421 allows demo accounts in cPanel to create databases and users, which should not normally be permitted.
4
Which versions of cPanel are affected by CVE-2017-18421?
CVE-2017-18421 affects cPanel versions below 66.0.2, specifically from version 60.0.3 up to 66.0.1.
5
Is CVE-2017-18421 a remote or local vulnerability?
CVE-2017-18421 is a local vulnerability that specifically affects demo accounts within the cPanel interface.