CVE-2017-18415
EUVD-2017-953102.08.2019, 14:15
cPanel before 67.9999.103 allows code execution in the context of the mailman account because of incorrect environment-variable filtering (SEC-302).Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cpanel | cpanel | 𝑥 < 56.0.52 |
| cpanel | cpanel | 57.9999.48 ≤ 𝑥 < 60.0.48 |
| cpanel | cpanel | 61.9999.55 ≤ 𝑥 < 62.0.30 |
| cpanel | cpanel | 62.0.31 ≤ 𝑥 < 64.0.40 |
| cpanel | cpanel | 64.0.42 ≤ 𝑥 < 66.0.23 |
| cpanel | cpanel | 66.0.24 ≤ 𝑥 < 67.9999.103 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration