Detections
Analytics
cPanel Remote Backup Module Information Disclosure
low Nessus Network Monitor Plugin ID 2392
Synopsis
The remote host is vulnerable to a flaw that allows attackers to retrieve sensitive files or data.Description
The remote host is running a version of cPanel which is older or as old as version 9.4.1.The remote version of this software is vulnerable to a file disclosure flaw in the Remote Backup module that may allow a local attacker to read arbitrary files on the remote system.
Solution
Upgrade or patch according to vendor recommendations.Plugin Details
Severity: Low
ID: 2392
Family: Web Servers
Published: 11/6/2004
Updated: 3/6/2019
Nessus ID: 18540
Risk Information
VPR
Risk Factor: Low
Score: 3.8
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 4.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS v3
Risk Factor: Low
Base Score: 3.7
Temporal Score: 3.7
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:H/RL:U/RC:X
Vulnerability Information
CPE: cpe:/a:cpanel:cpanel
Reference Information
CVE: CVE-2004-1603, CVE-2005-2021