CVE-2017-18425: Low severity cpanel vulnerability
In cPanel before 66.0.2, the cpdavderrorlog file can be created with weak permissions (SEC-280).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-18425?
CVE-2017-18425 is considered a medium severity vulnerability due to weak file permissions that may lead to unauthorized access.
How do I fix CVE-2017-18425?
To fix CVE-2017-18425, upgrade cPanel to version 66.0.2 or later where the permissions issue has been resolved.
Which versions of cPanel are affected by CVE-2017-18425?
CVE-2017-18425 affects cPanel versions prior to 66.0.2, including versions 56.0.1 to 56.0.51, 58.0.3 to 58.0.52, 60.0.3 to 60.0.45, 62.0.1 to 62.0.27, and 64.0.0 to 64.0.33.
What are the potential impacts of CVE-2017-18425?
The potential impact of CVE-2017-18425 includes the risk of unauthorized users gaining access to sensitive log files due to improper permissions.
Is there a workaround for CVE-2017-18425?
While upgrading is the recommended action, a temporary workaround may involve manually changing the permissions of the cpdavd_error_log file to prevent unauthorized access.