CVE-2017-18432: Infoleak
Published Aug 2, 2019
·Updated
In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).
Affected Software
5 affected components
Cpanel Cpanel>=55.9999.61<56.0.49
Cpanel Cpanel>=57.9999.48<58.0.49
Cpanel Cpanel>=59.9999.58<60.0.43
Cpanel Cpanel>=61.9999.55<62.0.24
Cpanel Cpanel>=63.9999.74<64.0.21
Event History
Aug 2, 2019
CVE Published
via MITRE·03:57 PM
Data Sourced
via MITRE·03:57 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18432?
CVE-2017-18432 has a moderate severity level due to potential exposure of sensitive database passwords.
2
How do I fix CVE-2017-18432?
To fix CVE-2017-18432, upgrade to cPanel version 64.0.21 or later.
3
What versions of cPanel are affected by CVE-2017-18432?
CVE-2017-18432 affects cPanel versions prior to 64.0.21.
4
What is the impact of CVE-2017-18432 on my system?
The impact of CVE-2017-18432 includes the potential leakage of database passwords during MySQL to SQLite conversions.
5
Is there a workaround for CVE-2017-18432?
There is no documented workaround for CVE-2017-18432, so patching is the recommended solution.