CVE-2018-20927: Low severity cpanel vulnerability
Published Aug 1, 2019
·Updated
cPanel before 70.0.23 allows jailshell escape because of incorrect crontab parsing (SEC-382).
Affected Software
3 affected components
Cpanel Cpanel>=61.9999.55<62.0.42
Cpanel Cpanel>=67.9999.64<68.0.33
Cpanel Cpanel>=69.9999.122<70.0.23
Event History
Aug 1, 2019
CVE Published
via MITRE·03:19 PM
Data Sourced
via MITRE·03:19 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20927?
CVE-2018-20927 is considered a high severity vulnerability due to its potential for jailshell escape.
2
How do I fix CVE-2018-20927?
To fix CVE-2018-20927, upgrade your cPanel version to 70.0.23 or later.
3
What versions of cPanel are affected by CVE-2018-20927?
CVE-2018-20927 affects cPanel versions prior to 70.0.23, as well as versions 61.9999.55 to 62.0.42 and 67.9999.64 to 68.0.33.
4
What type of vulnerability is CVE-2018-20927?
CVE-2018-20927 is a vulnerability specifically involving improper parsing of crontab entries leading to jailshell escape.
5
Is CVE-2018-20927 exploitable remotely?
Yes, CVE-2018-20927 can potentially be exploited remotely, allowing attackers to escape jailed shells.