CVE-2020-26102: High severity cpanel vulnerability
Published Sep 25, 2020
·Updated
In cPanel before 88.0.3, an insecure auth policy API key is used by Dovecot on a templated VM (SEC-550).
Affected Software
1 affected component
Cpanel Cpanel<88.0.3
Event History
Sep 25, 2020
CVE Published
via MITRE·05:42 AM
Data Sourced
via MITRE·05:42 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this cPanel vulnerability?
The vulnerability ID for this cPanel vulnerability is CVE-2020-26102.
2
What is the title of this cPanel vulnerability?
The title of this cPanel vulnerability is 'In cPanel before 88.0.3 an insecure auth policy API key is used by Dovecot on a templated VM (SEC-55…'.
3
What is the severity of CVE-2020-26102?
The severity of CVE-2020-26102 is high with a CVSS score of 7.5.
4
Which software versions are affected by CVE-2020-26102?
Versions up to and excluding 88.0.3 of cPanel are affected by CVE-2020-26102.
5
Where can I find more information about CVE-2020-26102?
You can find more information about CVE-2020-26102 in the cPanel documentation at https://docs.cpanel.net/changelogs/88-change-log/