CVE-2024-51567: CyberPanel Incorrect Default Permissions Vulnerability
CyberPanel contains an incorrect default permissions vulnerability that allows a remote, unauthenticated attacker to execute commands as root.
Other sources
upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows remote attackers to bypass authentication and execute arbitrary commands via /dataBases/upgrademysqlstatus by bypassing secMiddleware (which is only for a POST request) and using shell metacharacters in the statusfile property, as exploited in the wild in October 2024 by PSAUX. Versions through 2.3.6 and (unpatched) 2.3.7 are affected.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
CyberPanel (Cyber Panel)to a version that resolves this vulnerability.Fixed in 2.3.6 - Upgrade
Upgrade
CyberPanel (Cyber Panel)to a version that resolves this vulnerability.Fixed in 2.3.7 - Upgrade
Upgrade
CyberPanel (Cyber Panel)to a version that resolves this vulnerability.Patch 5b08cd6 - Compensating control
If mitigations are unavailable, discontinue use of CyberPanel to prevent exploitation of the incorrect default permissions vulnerability that enables remote unauthenticated command execution as root.
Event History
Frequently Asked Questions
What is the severity of CVE-2024-51567?
CVE-2024-51567 is considered critical due to its ability to allow remote, unauthenticated attackers to execute commands as root.
How do I fix CVE-2024-51567?
To fix CVE-2024-51567, upgrade CyberPanel to the latest version above 2.3.8 where the vulnerability is patched.
What versions of CyberPanel are affected by CVE-2024-51567?
CVE-2024-51567 affects CyberPanel versions prior to 2.3.8.
Can CVE-2024-51567 be exploited remotely?
Yes, CVE-2024-51567 can be exploited remotely without authentication.
What type of vulnerability is CVE-2024-51567?
CVE-2024-51567 is categorized as an incorrect default permissions vulnerability.