CVE-2019-14404

cPanel before 78.0.18 allows certain file-read operations in the context of the root account via the Exim virtual_user_spam router (SEC-484).

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2019-07-30

Last modified

2024-08-05

Affected products

• Cpanel (Cpanel)

References

• https://documentation.cpanel.net/display/CL/78+Change+Log