CVE-2018-20947: Medium severity cpanel vulnerability
Published Aug 1, 2019
·Updated
cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).
Affected Software
3 affected components
Cpanel Cpanel>=61.9999.55<62.0.39
Cpanel Cpanel>=65.9999.38<66.0.35
Cpanel Cpanel>=67.9999.64<68.0.27
Event History
Aug 1, 2019
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20947?
CVE-2018-20947 has been classified as a medium severity vulnerability due to potential unauthorized file write operations.
2
How do I fix CVE-2018-20947?
The recommended fix for CVE-2018-20947 is to update cPanel to version 68.0.27 or later.
3
What versions of cPanel are affected by CVE-2018-20947?
CVE-2018-20947 affects cPanel versions prior to 68.0.27, specifically versions 61.9999.55 to 62.0.39 and 65.9999.38 to 66.0.35.
4
Can CVE-2018-20947 be exploited remotely?
Yes, CVE-2018-20947 can be exploited remotely through the telnetcrt script.
5
What types of operations are vulnerable in CVE-2018-20947?
CVE-2018-20947 allows unauthorized file write operations which could lead to data manipulation or system compromise.