Vulnerabilities > CVE-2018-20947 - Exposure of Resource to Wrong Sphere vulnerability in Cpanel

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

local

low complexity

cpanel

CWE-668

NVD

Published: 2019-08-01

Updated: 2019-08-08

Summary

cPanel before 68.0.27 allows certain file-write operations via the telnetcrt script (SEC-356).

Vulnerable Configurations

Part	Description	Count
Application	Cpanel Cpanel Cpanel 67.9999.64 Cpanel Cpanel 67.9999.76 Cpanel Cpanel 67.9999.78 Cpanel Cpanel 67.9999.86 Cpanel Cpanel 67.9999.96 Cpanel Cpanel 67.9999.99 Cpanel Cpanel 67.9999.103 Cpanel Cpanel 67.9999.118 Cpanel Cpanel 67.9999.124 Cpanel Cpanel 67.9999.125 Cpanel Cpanel 67.9999.127 Cpanel Cpanel 67.9999.128 Cpanel Cpanel 67.9999.130 Cpanel Cpanel 68.0.1 Cpanel Cpanel 68.0.2 Cpanel Cpanel 68.0.3 Cpanel Cpanel 68.0.4 Cpanel Cpanel 68.0.6 Cpanel Cpanel 68.0.7 Cpanel Cpanel 68.0.8 Cpanel Cpanel 68.0.9 Cpanel Cpanel 68.0.10 Cpanel Cpanel 68.0.12 Cpanel Cpanel 68.0.13 Cpanel Cpanel 68.0.14 Cpanel Cpanel 68.0.15 Cpanel Cpanel 68.0.16 Cpanel Cpanel 68.0.17 Cpanel Cpanel 68.0.19 Cpanel Cpanel 68.0.20 Cpanel Cpanel 68.0.21 Cpanel Cpanel 68.0.23 Cpanel Cpanel 68.0.25 Cpanel Cpanel 68.0.26 Cpanel Cpanel 61.9999.55 Cpanel Cpanel 61.9999.65 Cpanel Cpanel 61.9999.66 Cpanel Cpanel 61.9999.82 Cpanel Cpanel 61.9999.84 Cpanel Cpanel 61.9999.96 Cpanel Cpanel 61.9999.101 Cpanel Cpanel 61.9999.115 Cpanel Cpanel 61.9999.120 Cpanel Cpanel 62.0.1 Cpanel Cpanel 62.0.2 Cpanel Cpanel 62.0.4 Cpanel Cpanel 62.0.5 Cpanel Cpanel 62.0.6 Cpanel Cpanel 62.0.7 Cpanel Cpanel 62.0.8 Cpanel Cpanel 62.0.9 Cpanel Cpanel 62.0.10 Cpanel Cpanel 62.0.11 Cpanel Cpanel 62.0.12 Cpanel Cpanel 62.0.14 Cpanel Cpanel 62.0.15 Cpanel Cpanel 62.0.16 Cpanel Cpanel 62.0.17 Cpanel Cpanel 62.0.19 Cpanel Cpanel 62.0.23 Cpanel Cpanel 62.0.24 Cpanel Cpanel 62.0.26 Cpanel Cpanel 62.0.27 Cpanel Cpanel 62.0.28 Cpanel Cpanel 62.0.29 Cpanel Cpanel 62.0.30 Cpanel Cpanel 62.0.31 Cpanel Cpanel 62.0.34 Cpanel Cpanel 62.0.35 Cpanel Cpanel 62.0.36 Cpanel Cpanel 62.0.38 Cpanel Cpanel 65.9999.38 Cpanel Cpanel 65.9999.39 Cpanel Cpanel 65.9999.49 Cpanel Cpanel 65.9999.50 Cpanel Cpanel 65.9999.57 Cpanel Cpanel 65.9999.64 Cpanel Cpanel 65.9999.66 Cpanel Cpanel 65.9999.70 Cpanel Cpanel 65.9999.74 Cpanel Cpanel 65.9999.78 Cpanel Cpanel 65.9999.82 Cpanel Cpanel 65.9999.87 Cpanel Cpanel 65.9999.91 Cpanel Cpanel 65.9999.94 Cpanel Cpanel 65.9999.100 Cpanel Cpanel 65.9999.104 Cpanel Cpanel 65.9999.107 Cpanel Cpanel 65.9999.120 Cpanel Cpanel 65.9999.126 Cpanel Cpanel 65.9999.136 Cpanel Cpanel 65.9999.140 Cpanel Cpanel 65.9999.155 Cpanel Cpanel 65.9999.170 Cpanel Cpanel 65.9999.172 Cpanel Cpanel 65.9999.176 Cpanel Cpanel 65.9999.177 Cpanel Cpanel 65.9999.179 Cpanel Cpanel 65.9999.180 Cpanel Cpanel 65.9999.182 Cpanel Cpanel 65.9999.183 Cpanel Cpanel 65.9999.184 Cpanel Cpanel 65.9999.186 Cpanel Cpanel 65.9999.187 Cpanel Cpanel 65.9999.189 Cpanel Cpanel 65.9999.190 Cpanel Cpanel 65.9999.192 Cpanel Cpanel 65.9999.195 Cpanel Cpanel 66.0.1 Cpanel Cpanel 66.0.2 Cpanel Cpanel 66.0.3 Cpanel Cpanel 66.0.4 Cpanel Cpanel 66.0.5 Cpanel Cpanel 66.0.6 Cpanel Cpanel 66.0.7 Cpanel Cpanel 66.0.8 Cpanel Cpanel 66.0.9 Cpanel Cpanel 66.0.10 Cpanel Cpanel 66.0.11 Cpanel Cpanel 66.0.12 Cpanel Cpanel 66.0.13 Cpanel Cpanel 66.0.14 Cpanel Cpanel 66.0.15 Cpanel Cpanel 66.0.17 Cpanel Cpanel 66.0.18 Cpanel Cpanel 66.0.19 Cpanel Cpanel 66.0.22 Cpanel Cpanel 66.0.23 Cpanel Cpanel 66.0.24 Cpanel Cpanel 66.0.25 Cpanel Cpanel 66.0.26 Cpanel Cpanel 66.0.27 Cpanel Cpanel 66.0.29 Cpanel Cpanel 66.0.30 Cpanel Cpanel 66.0.33 Cpanel Cpanel 66.0.34	136

Common Weakness Enumeration (CWE)

CWE-668 - Exposure of Resource to Wrong Sphere

References

https://documentation.cpanel.net/display/CL/68+Change+Log