Hébergement web, cloud et solutions personnalisées
cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system. SEC-594 Summary Avoid usage of predictable PostgreSQL socket in /tmp. Security Rating …
The post cPanel TSR-2022-0001 Full Disclosure first appeared on cPanel Newsroom.
cPanel Newsroom
cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system. SEC-592 Summary Arbitrary code execution via install_locallib_loginprofile script. Security Rating cPanel has …
The post cPanel TSR 2021-0006 Full Disclosure first appeared on cPanel Newsroom.
cPanel Newsroom
cPanel has released its Targeted Security Release to address security concerns with the cPanel product. These updates are currently available to all customers via the standard update system. cPanel has rated this update as having a CVSSv3.1 score of 3.9 to 5.3. For more information on ratings, please visit our documentation. Is there any …
The post cPanel TSR-2021-0005 Full Disclosure first appeared on cPanel Newsroom.
cPanel Newsroom
cPanel has released new builds for all public update tiers. These updates provide targeted changes to address security concerns with the cPanel & WHM product. These builds are currently available to all customers via the standard update system. cPanel TSR-2021-0004 Full Disclosure SEC-585 Summary WHM Locale Upload allows vulnerable to …
The post cPanel TSR-2021-0004 Full Disclosure first appeared on cPanel Newsroom.
cPanel Newsroom
SEC-584 Summary Information disclosure via weak web stats permissions. Security Rating cPanel has assigned this vulnerability a CVSSv3.1 score of 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description The processing of web log reports for cPanel accounts used insecure storage locations for the generated files. This allowed other local users to read the log reports. …
The post cPanel TSR 2021-0003 Full Disclosure first appeared on cPanel Newsroom.
cPanel Newsroom
SEC-581 Summary Self-XSS Vulnerability in EasyApache 4 Save Profile. Security Rating cPanel has assigned this vulnerability a CVSSv3.1 score of 1.8 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N Description When attempting to save an EasyApache profile with the same name as an existing profile, the resultant error message was not adequately encoded. This would allow an …
The post cPanel TSR-2021-0002 Full Disclosure first appeared on cPanel Newsroom.
cPanel Newsroom