CVE-2019-17375: High severity cpanel vulnerability
Published Oct 9, 2019
·Updated
cPanel before 82.0.15 allows API token credentials to persist after an account has been renamed or terminated (SEC-517).
Affected Software
1 affected component
Cpanel Cpanel>=81.9999.242<82.0.15
Event History
Oct 9, 2019
CVE Published
via MITRE·03:08 PM
Data Sourced
via MITRE·03:08 PM
Description
Frequently Asked Questions
1
What is CVE-2019-17375?
CVE-2019-17375 is a vulnerability in cPanel before 82.0.15 that allows API token credentials to persist after an account has been renamed or terminated.
2
How severe is CVE-2019-17375?
CVE-2019-17375 has a severity rating of 8.8 (high).
3
Which software versions are affected by CVE-2019-17375?
Versions of cPanel before 82.0.15 are affected by CVE-2019-17375.
4
How can I fix CVE-2019-17375?
To fix CVE-2019-17375, update cPanel to version 82.0.15 or later.
5
Where can I find more information about CVE-2019-17375?
You can find more information about CVE-2019-17375 in the cPanel Change Log (https://documentation.cpanel.net/display/CL/82+Change+Log) and the cPanel TSR-2019-0005 Full Disclosure advisory (https://news.cpanel.com/cpanel-tsr-2019-0005-full-disclosure/).