cPanel before 82.0.18 allows attackers to conduct arbitrary chown operations as root during log processing (SEC-532).

Published Mar 17, 2020 · Updated Aug 5, 2024 · Assigned by mitre