CVE-2017-18444: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 64.0.21 allows demo accounts to execute SSH API commands (SEC-248).
Affected Software
5 affected components
Cpanel Cpanel>=55.9999.61<56.0.49
Cpanel Cpanel>=57.9999.48<58.0.49
Cpanel Cpanel>=59.9999.58<60.0.43
Cpanel Cpanel>=61.9999.55<62.0.24
Cpanel Cpanel>=63.9999.74<64.0.21
Event History
Aug 2, 2019
CVE Published
via MITRE·04:19 PM
Data Sourced
via MITRE·04:19 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18444?
CVE-2017-18444 is a vulnerability found in cPanel versions prior to 64.0.21 that allows demo accounts to execute SSH API commands.
2
What versions of cPanel are affected by CVE-2017-18444?
CVE-2017-18444 affects cPanel versions from 55.9999.61 up to 56.0.49, 57.9999.48 up to 58.0.49, 59.9999.58 up to 60.0.43, 61.9999.55 up to 62.0.24, and 63.9999.74 up to 64.0.21.
3
What is the severity of CVE-2017-18444?
The severity of CVE-2017-18444 is determined to be medium, given the potential for misuse of SSH API commands by unauthorized demo accounts.
4
How do I fix CVE-2017-18444?
To fix CVE-2017-18444, upgrade your cPanel version to 64.0.21 or later.
5
What risks does CVE-2017-18444 pose?
CVE-2017-18444 poses risks of unauthorized remote command execution through SSH, which can lead to server compromise and data breaches.