First published: Thu Aug 01 2019(Updated: )
cPanel before 74.0.8 mishandles account suspension because of an invalid email_accounts.json file (SEC-445).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cpanel Cpanel | <74.0.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-20880 is considered a moderate severity vulnerability due to its impact on account suspension handling.
To fix CVE-2018-20880, update your cPanel installation to version 74.0.8 or later.
CVE-2018-20880 affects cPanel versions before 74.0.8.
CVE-2018-20880 can lead to improper account suspension due to mishandling of the email_accounts.json file.
There is no known workaround for CVE-2018-20880; updating to a patched version is recommended.