CVE-2017-18432

CVE Database · CVE-2017-18432

· N/AModified

CVSS v3.1

N/A

EPSS

0.43%

Published

Aug 2, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

In cPanel before 64.0.21, Horde MySQL to SQLite conversion can leak a database password (SEC-234).

Weaknesses (CWE)

CWE-200

Affected Products (5)

cpanel · cpanel (up to 56.0.49)vulnerable

cpanel · cpanel (up to 58.0.49)vulnerable

cpanel · cpanel (up to 60.0.43)vulnerable

cpanel · cpanel (up to 62.0.24)vulnerable

cpanel · cpanel (up to 64.0.21)vulnerable

References (2)

Release NotesVendor Advisory

Release NotesVendor Advisory