Insecure SSL Hostname Verification in cPanel Support-Agreement Download (SEC-279)

Insecure SSL Hostname Verification in cPanel Support-Agreement Download (SEC-279)

CVE-2017-18407 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:N

cPanel before 67.9999.103 does not enforce SSL hostname verification for the support-agreement download (SEC-279).

Learn more about our Web Application Penetration Testing UK.