Vulnerabilities > CVE-2016-10791 - Credentials Management vulnerability in Cpanel

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

NVD

Published: 2019-08-06

Updated: 2019-08-13

Summary

cPanel before 60.0.15 does not ensure that system accounts lack a valid password, so that logins are impossible (CPANEL-9559).

Part	Description	Count
Application	Cpanel Cpanel Cpanel 59.9999.58 Cpanel Cpanel 59.9999.63 Cpanel Cpanel 59.9999.70 Cpanel Cpanel 59.9999.73 Cpanel Cpanel 59.9999.78 Cpanel Cpanel 59.9999.86 Cpanel Cpanel 59.9999.89 Cpanel Cpanel 59.9999.99 Cpanel Cpanel 59.9999.111 Cpanel Cpanel 59.9999.119 Cpanel Cpanel 59.9999.130 Cpanel Cpanel 59.9999.134 Cpanel Cpanel 59.9999.137 Cpanel Cpanel 59.9999.145 Cpanel Cpanel 59.9999.149 Cpanel Cpanel 59.9999.157 Cpanel Cpanel 59.9999.161 Cpanel Cpanel 59.9999.164 Cpanel Cpanel 59.9999.167 Cpanel Cpanel 59.9999.169 Cpanel Cpanel 59.9999.171 Cpanel Cpanel 59.9999.173 Cpanel Cpanel 60.0.3 Cpanel Cpanel 60.0.4 Cpanel Cpanel 60.0.5 Cpanel Cpanel 60.0.6 Cpanel Cpanel 60.0.8 Cpanel Cpanel 60.0.9 Cpanel Cpanel 60.0.10 Cpanel Cpanel 60.0.11 Cpanel Cpanel 60.0.12 Cpanel Cpanel 60.0.13 Cpanel Cpanel 60.0.14	33