Situation
A security vulnerability was discovered which allows the calendar and contact data of a mail account to be retrieved without any credentials.
Affected product version
| Product | Affected versions | Patched versions |
|---|---|---|
| cPanel & WHM | v124 and later |
|
Impact
Successful exploitation can allow an attacker with no account on the server and no credentials to read the calendar entries and contacts of any mail account the server hosts.
Call to action
Update to the latest patched version: How do I update cPanel/WHM?
Comments
0 comments
Article is closed for comments.