PT-2020-11941

CVE-2020-10119

Published

2020-03-17

Updated

2020-03-19

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 84.0.20

Description The issue allows a demo account to achieve remote code execution via a cpsrvd rsync shell.

Recommendations For versions prior to 84.0.20, update to version 84.0.20 or later to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾