CVE-2019-13359

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory…

published July 16, 2019

CVSS
—
EPSS
26%
Percentile
98.0
In the wild
Unconfirmed
What it is

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory, and use it to become the root user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25770 · 98.0th percentile
Published
2019-07-16T17:02Z
EPSS history
Timeline
  • 16 JUL 17:02Z
    In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, a cwpsrv-xxx cookie allows a normal user to craft and upload a session file to the /tmp directory…
    cvelistv5