CVE-2017-18424: Infoleak
In cPanel before 66.0.2, the Apache HTTP Server configuration file is changed to world-readable when rebuilt (SEC-274).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-18424?
CVE-2017-18424 is classified as a moderate severity vulnerability due to potential exposure of sensitive configuration information.
How do I fix CVE-2017-18424?
To fix CVE-2017-18424, update your cPanel installation to version 66.0.2 or later.
Which versions of cPanel are affected by CVE-2017-18424?
CVE-2017-18424 affects cPanel versions before 66.0.2, specifically between 60.0.3 and 60.0.45, and between 62.0.1 and 62.0.27, as well as between 64.0.0 and 64.0.33.
What is the impact of CVE-2017-18424?
The impact of CVE-2017-18424 includes unauthorized access to the Apache HTTP Server configuration file, which may lead to further security issues.
Is CVE-2017-18424 specific to certain operating systems?
CVE-2017-18424 is not limited to specific operating systems, but it affects cPanel installations across various platforms.