CVE-2018-20938

cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324)

published August 1, 2019

CVSS
—
EPSS
1%
Percentile
47.2
In the wild
Unconfirmed
What it is

cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00590 · 47.2th percentile
Published
2019-08-01T16:07Z
EPSS history
Timeline
  • 01 AUG 16:07Z
    cPanel before 68.0.27 does not enforce ownership during addpkgext and delpkgext WHM API calls (SEC-324)
    cvelistv5