SSL verification is disabled in the DNS Cluster system. This could allow for a malicious server to man-in-the-middle the request and capture credentials.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| cpanel | cpanel | 126.0.0 – < 126.0.59 | |
| cpanel | whm | 126.0.0 – < 126.0.59 | |
| cpanel | wp squared | 126.1.0 – < 136.1.12 | |
| WebPros | cPanel | 11.136.0.0 – < 11.136.0.10, 11.134.0.0 – < 11.134.0.26, 11.132.0.0 – < 11.132.0.32, 11.130.0.0 – < 11.130.0.23, 11.126.0.0 – < 11.126.0.59 | |
| WebPros | WP Squared | 11.126.1.0 – < 11.136.1.12 |
cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* ≥ 126.0.0 < 126.0.59cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* ≥ 130.0.0 < 130.0.23cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* ≥ 132.0.0 < 132.0.32cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* ≥ 134.0.0 < 134.0.26cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:* ≥ 136.0.0 < 136.0.10cpe:2.3:a:cpanel:wp_squared:*:*:*:*:*:wordpress:*:* ≥ 126.1.0 < 136.1.12cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* ≥ 126.0.0 < 126.0.59cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* ≥ 130.0.0 < 130.0.23cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* ≥ 132.0.0 < 132.0.32cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* ≥ 134.0.0 < 134.0.26cpe:2.3:a:cpanel:whm:*:*:*:*:*:*:*:* ≥ 136.0.0 < 136.0.10Nuestro sensor honeypot gratuito y de código abierto espera en puertos que su servidor no usa y reporta a una lista compartida los escáneres y atacantes que se conectan.