CVE-2017-18458: Input Validation
Published Aug 2, 2019
·Updated
cPanel before 62.0.17 allows file overwrite when renaming an account (SEC-219).
Affected Software
4 affected components
Cpanel Cpanel>=55.9999.61<56.0.46
Cpanel Cpanel>=57.9999.48<58.0.45
Cpanel Cpanel>=59.9999.58<60.0.39
Cpanel Cpanel>=61.9999.55<62.0.17
Event History
Aug 2, 2019
CVE Published
via MITRE·04:31 PM
Data Sourced
via MITRE·04:31 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-18458?
CVE-2017-18458 is considered a moderate severity vulnerability due to the risk of file overwrites when renaming accounts.
2
How do I fix CVE-2017-18458?
To fix CVE-2017-18458, update cPanel to version 62.0.17 or later.
3
What versions of cPanel are affected by CVE-2017-18458?
CVE-2017-18458 affects cPanel versions prior to 62.0.17, including versions 55.x, 56.x, 57.x, 58.x, 59.x, 60.x, and 61.x.
4
What kind of impact can CVE-2017-18458 have on my server?
CVE-2017-18458 can allow unauthorized file overwrites, potentially leading to service disruption or data loss.
5
Is there a workaround for CVE-2017-18458 if I cannot update immediately?
No specific workaround is recommended for CVE-2017-18458; updating cPanel is the best solution.