Permission Issues

CVE-2017-18425

Low

2.5/10

Summary

In cPanel before 66.0.2, the cpdavd_error_log file can be created with weak permissions (SEC-280).

Attack Complexity: HIGH
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: LOW
Confidentiality Impact: LOW
Availability Impact: NONE

CWE-275 - Permission Issues

Weaknesses in this category are related to improper assignment or handling of permissions.

References

Advisory Timeline

Published Aug 02, 2019