Vulnerabilities > CVE-2019-14404 - Unspecified vulnerability in Cpanel

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
cpanel

Summary

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484).

Vulnerable Configurations

Part Description Count
Application
Cpanel
840