Design/Logic Flaw

2020-05-1116:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.1%

cPanel before 86.0.14 allows remote attackers to trigger a bandwidth suspension via mail log strings (SEC-505).

CPENameOperatorVersion
cpanelge11.78.0.1
cpanellt11.78.0.47
cpanelge11.84.0.0
cpanellt11.84.0.22
cpanelge11.86.0.1
cpanellt11.86.0.14

Name	Operator	Version
cpanel	ge	11.78.0.1
cpanel	lt	11.78.0.47
cpanel	ge	11.84.0.0
cpanel	lt	11.84.0.22
cpanel	ge	11.86.0.1
cpanel	lt	11.86.0.14

References

documentation.cpanel.net/display/CL/86+Change+Log

news.cpanel.com/cpanel-tsr-2020-0002-full-disclosure/