CVE-2019-20496: Medium severity cpanel vulnerability
Published Mar 17, 2020
·Updated
cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532).
Affected Software
3 affected components
Cpanel Cpanel>=77.9999.110<78.0.43
Cpanel Cpanel>=81.9999.242<82.0.18
Cpanel Cpanel>=83.9999.115<84.0.10
Event History
Mar 17, 2020
CVE Published
via MITRE·02:30 PM
Data Sourced
via MITRE·02:30 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this cPanel vulnerability?
The vulnerability ID is CVE-2019-20496.
2
What is the severity of CVE-2019-20496?
The severity of CVE-2019-20496 is medium (severity value: 5.5).
3
How can attackers exploit CVE-2019-20496?
Attackers can exploit CVE-2019-20496 to conduct arbitrary chown operations as root during log processing.
4
Which versions of cPanel are affected by CVE-2019-20496?
cPanel versions 77.9999.110 to 78.0.43, 81.9999.242 to 82.0.18, and 83.9999.115 to 84.0.10 are affected by CVE-2019-20496.
5
Is there a fix available for this vulnerability?
Yes, a fix is available for this vulnerability. Users should update their cPanel to version 82.0.18 or higher.