CVE-2017-18429: Low severity cpanel vulnerability
Published Aug 2, 2019
·Updated
In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291).
Affected Software
6 affected components
Cpanel Cpanel>=55.9999.61<56.0.51
Cpanel Cpanel>=57.9999.48<58.0.52
Cpanel Cpanel>=59.9999.58<60.0.45
Cpanel Cpanel>=61.9999.55<62.0.27
Cpanel Cpanel>=63.9999.74<64.0.33
Cpanel Cpanel>=65.9999.38<66.0.2
Event History
Aug 2, 2019
CVE Published
via MITRE·03:54 PM
Data Sourced
via MITRE·03:54 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18429?
CVE-2017-18429 is classified as a moderate vulnerability due to its potential impact on data privacy.
2
How do I fix CVE-2017-18429?
To fix CVE-2017-18429, upgrade your cPanel installation to version 66.0.2 or later.
3
What kind of data is affected by CVE-2017-18429?
CVE-2017-18429 affects Apache HTTP Server SSL domain logs that may remain on disk after an account is terminated.
4
Who is affected by CVE-2017-18429?
Users of cPanel versions prior to 66.0.2 are affected by CVE-2017-18429.
5
What is the main issue with CVE-2017-18429?
The main issue with CVE-2017-18429 is that sensitive SSL log data can persist on the server after account deletion.