Skip to content
OpenAdvisories
High · 8.1 CVE-2023-0391 EUVD-2023-12452GHSA-4gcf-523q-9gmp

MGT-COMMERCE CloudPanel Shared Certificate

Published Mar 21, 2023 · Updated Feb 26, 2025 · Assigned by rapid7

Description

MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every installation of CloudPanel. This behavior was observed in version 2.2.0. There has been no indication from the vendor this has been addressed in version 2.2.1.

Affected products

VendorProductAffectedFixed
MGT-COMMERCE CloudPanel ≤ 2.2.0 —

References