CVE-2017-18446: Medium severity cpanel vulnerability
Published Aug 2, 2019
·Updated
cPanel before 64.0.21 allows file-read and file-write operations for demo accounts via the SourceIPCheck API (SEC-250).
Affected Software
5 affected components
Cpanel Cpanel>=55.9999.61<56.0.49
Cpanel Cpanel>=57.9999.48<58.0.49
Cpanel Cpanel>=59.9999.58<60.0.43
Cpanel Cpanel>=61.9999.55<62.0.24
Cpanel Cpanel>=63.9999.74<64.0.21
Event History
Aug 2, 2019
CVE Published
via MITRE·04:20 PM
Data Sourced
via MITRE·04:20 PM
Description
Frequently Asked Questions
1
What is the vulnerability associated with CVE-2017-18446?
CVE-2017-18446 allows file-read and file-write operations for demo accounts through the SourceIPCheck API in cPanel before version 64.0.21.
2
Who is affected by CVE-2017-18446?
Users of cPanel versions prior to 64.0.21 are affected by CVE-2017-18446.
3
What is the severity level of CVE-2017-18446?
The severity level of CVE-2017-18446 is generally considered high due to potential unauthorized access to sensitive files.
4
How can I resolve the issue of CVE-2017-18446?
To resolve CVE-2017-18446, upgrade cPanel to version 64.0.21 or later.
5
Does CVE-2017-18446 affect all cPanel installations?
CVE-2017-18446 primarily affects demo accounts in cPanel installations before version 64.0.21.