cPanel up to 74.0.7 Account Suspension email_accounts.json unknown vulnerability

A vulnerability, which was classified as problematic, was found in cPanel up to 74.0.7 (Hosting Control Software). This affects an unknown function of the file email_accounts.json of the component Account Suspension. The impact remains unknown.

The weakness was published 08/01/2019. The advisory is shared at documentation.cpanel.net. This vulnerability is uniquely identified as CVE-2018-20880 since 07/31/2019. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 08/01/2019).

Upgrading to version 74.0.8 eliminates this vulnerability.

Similar entries are available at 139118, 139119, 139120 and 139121.

Type

• Hosting Control Software

Name

• cPanel

• 🔒
• 🔒
• 🔒

• 🔒
• 🔒
• 🔒

Class: Unknown
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Upgrade
Status: 🔍

0-Day Time: 🔒

Upgrade: cPanel 74.0.8

07/31/2019 CVE assigned
08/01/2019 +1 days Advisory disclosed
08/01/2019 +0 days VulDB entry created
08/01/2019 +0 days VulDB last updateAdvisory: documentation.cpanel.net

CVE: CVE-2018-20880 (🔒)
See also: 🔒

Created: 08/01/2019 04:55 PM
Complete: 🔍

Comments

Comments are closed.