cPanel before 68.0.15 allows arbitrary file-read operations via Exim vdomainaliases (SEC-329).
CVSS Score
5.5
EPSS Score
0.001
Published
2019-08-02
cPanel before 68.0.15 does not preserve permissions for local backup transport (SEC-330).
CVSS Score
3.3
EPSS Score
0.001
Published
2019-08-02
DnsUtils in cPanel before 68.0.15 allows zone creation for hostname and account subdomains (SEC-331).
CVSS Score
3.8
EPSS Score
0.002
Published
2019-08-02
cPanel before 68.0.15 allows attackers to read root's crontab file during a short time interval upon enabling or disabling sqloptimizer (SEC-332).
CVSS Score
3.7
EPSS Score
0.002
Published
2019-08-02
cPanel before 68.0.15 allows local root code execution via cpdavd (SEC-333).
CVSS Score
7.8
EPSS Score
0.002
Published
2019-08-02
cPanel before 68.0.15 allows user accounts to be partially created with invalid username formats (SEC-334).
CVSS Score
2.7
EPSS Score
0.003
Published
2019-08-02
cPanel before 68.0.15 allows stored XSS during a cpaddons moderated upgrade (SEC-336).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-02
cPanel before 68.0.15 allows use of an unreserved e-mail address in DNS zone SOA records (SEC-306).
CVSS Score
2.7
EPSS Score
0.003
Published
2019-08-02
cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
CVSS Score
7.8
EPSS Score
0.001
Published
2019-08-02
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail (SEC-310).
CVSS Score
3.8
EPSS Score
0.001
Published
2019-08-02