CVE-2018-20908: Medium severity cpanel vulnerability
Published Aug 1, 2019
·Updated
cPanel before 71.9980.37 allows arbitrary file-read operations during pkgacct custom template handling (SEC-435).
Affected Software
3 affected components
Cpanel Cpanel>=61.9999.55<62.0.47
Cpanel Cpanel>=67.9999.64<68.0.39
Cpanel Cpanel>=69.9999.122<70.0.43
Event History
Aug 1, 2019
CVE Published
via MITRE·02:29 PM
Data Sourced
via MITRE·02:29 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20908?
CVE-2018-20908 has been identified with a medium severity level due to its potential for unauthorized file access.
2
How do I fix CVE-2018-20908?
To mitigate CVE-2018-20908, update cPanel to version 71.9980.37 or later.
3
What types of operations are affected by CVE-2018-20908?
CVE-2018-20908 allows arbitrary file-read operations during pkgacct custom template handling.
4
Which versions of cPanel are vulnerable to CVE-2018-20908?
cPanel versions prior to 71.9980.37, specifically those from 61.9999.55 to 62.0.47, 67.9999.64 to 68.0.39, and 69.9999.122 to 70.0.43 are vulnerable.
5
Who is affected by CVE-2018-20908?
Anyone using the specified vulnerable versions of cPanel is potentially affected by CVE-2018-20908.