Vulnerabilities > CVE-2019-14724 - Authorization Bypass Through User-Controlled Key vulnerability in Control-Webpanel Webpanel 0.9.8.851

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
control-webpanel
CWE-639
NVD
Published: 2019-09-11
Updated: 2023-01-24

Summary

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to edit an e-mail forwarding destination of a victim's account via an attacker account.

Vulnerable Configurations

Part Description Count
Application
Control-Webpanel
1

Common Weakness Enumeration (CWE)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/154404/cwp098851-removeuser.txt
idPACKETSTORM:154404
last seen2019-09-10
published2019-09-09
reporterPongtorn Angsuchotmetee
sourcehttps://packetstormsecurity.com/files/154404/Control-Web-Panel-0.9.8.851-Privilege-Escalation.html
titleControl Web Panel 0.9.8.851 Privilege Escalation

References