Vulnerability Details CVE-2019-20490
cPanel before 82.0.18 allows authentication bypass because webmail usernames are processed inconsistently (SEC-499).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.5%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
Products affected by CVE-2019-20490
-
cpe:2.3:a:cpanel:cpanel:77.9999.110
-
cpe:2.3:a:cpanel:cpanel:77.9999.122
-
cpe:2.3:a:cpanel:cpanel:77.9999.135
-
cpe:2.3:a:cpanel:cpanel:78.0.1
-
cpe:2.3:a:cpanel:cpanel:78.0.10
-
cpe:2.3:a:cpanel:cpanel:78.0.11
-
cpe:2.3:a:cpanel:cpanel:78.0.12
-
cpe:2.3:a:cpanel:cpanel:78.0.13
-
cpe:2.3:a:cpanel:cpanel:78.0.15
-
cpe:2.3:a:cpanel:cpanel:78.0.16
-
cpe:2.3:a:cpanel:cpanel:78.0.17
-
cpe:2.3:a:cpanel:cpanel:78.0.18
-
cpe:2.3:a:cpanel:cpanel:78.0.2
-
cpe:2.3:a:cpanel:cpanel:78.0.20
-
cpe:2.3:a:cpanel:cpanel:78.0.21
-
cpe:2.3:a:cpanel:cpanel:78.0.23
-
cpe:2.3:a:cpanel:cpanel:78.0.24
-
cpe:2.3:a:cpanel:cpanel:78.0.27
-
cpe:2.3:a:cpanel:cpanel:78.0.3
-
cpe:2.3:a:cpanel:cpanel:78.0.30
-
cpe:2.3:a:cpanel:cpanel:78.0.32
-
cpe:2.3:a:cpanel:cpanel:78.0.34
-
cpe:2.3:a:cpanel:cpanel:78.0.35
-
cpe:2.3:a:cpanel:cpanel:78.0.36
-
cpe:2.3:a:cpanel:cpanel:78.0.37
-
cpe:2.3:a:cpanel:cpanel:78.0.38
-
cpe:2.3:a:cpanel:cpanel:78.0.39
-
cpe:2.3:a:cpanel:cpanel:78.0.40
-
cpe:2.3:a:cpanel:cpanel:78.0.41
-
cpe:2.3:a:cpanel:cpanel:78.0.6
-
cpe:2.3:a:cpanel:cpanel:78.0.7
-
cpe:2.3:a:cpanel:cpanel:81.9999.242
-
cpe:2.3:a:cpanel:cpanel:81.9999.247
-
cpe:2.3:a:cpanel:cpanel:82.0.0
-
cpe:2.3:a:cpanel:cpanel:82.0.10
-
cpe:2.3:a:cpanel:cpanel:82.0.11
-
cpe:2.3:a:cpanel:cpanel:82.0.12
-
cpe:2.3:a:cpanel:cpanel:82.0.13
-
cpe:2.3:a:cpanel:cpanel:82.0.14
-
cpe:2.3:a:cpanel:cpanel:82.0.15
-
cpe:2.3:a:cpanel:cpanel:82.0.2
-
cpe:2.3:a:cpanel:cpanel:82.0.3
-
cpe:2.3:a:cpanel:cpanel:82.0.4
-
cpe:2.3:a:cpanel:cpanel:82.0.5
-
cpe:2.3:a:cpanel:cpanel:82.0.6
-
cpe:2.3:a:cpanel:cpanel:82.0.7
-
cpe:2.3:a:cpanel:cpanel:82.0.8
-
cpe:2.3:a:cpanel:cpanel:82.0.9
-
cpe:2.3:a:cpanel:cpanel:83.9999.115
-
cpe:2.3:a:cpanel:cpanel:83.9999.137
-
cpe:2.3:a:cpanel:cpanel:83.9999.151
-
cpe:2.3:a:cpanel:cpanel:83.9999.157
-
cpe:2.3:a:cpanel:cpanel:83.9999.169
-
cpe:2.3:a:cpanel:cpanel:83.9999.173
-
cpe:2.3:a:cpanel:cpanel:83.9999.180
-
cpe:2.3:a:cpanel:cpanel:84.0.0
-
cpe:2.3:a:cpanel:cpanel:84.0.1
-
cpe:2.3:a:cpanel:cpanel:84.0.2
-
cpe:2.3:a:cpanel:cpanel:84.0.4
-
cpe:2.3:a:cpanel:cpanel:84.0.5
-
cpe:2.3:a:cpanel:cpanel:84.0.6
-
cpe:2.3:a:cpanel:cpanel:84.0.7
-
cpe:2.3:a:cpanel:cpanel:84.0.8
-
cpe:2.3:a:cpanel:cpanel:84.0.9