In cPanel before 57.9999.54, /scripts/unsuspendacct exposed TTYs (SEC-116).
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://documentation.cpanel.net/display/CL/58+Change+Log | release notes vendor advisory |
https://news.cpanel.com/cpanel-tsr-2016-0003-full-disclosure/ | vendor advisory |