Executive Summary

This vulnerability involves insufficient input validation in the feature file name parameter of the `feature::LOADFEATUREFILE` adminbin call. Specifically, when a relative file path is provided, it can lead to arbitrary file read, meaning an attacker could potentially read files on the system that they should not have access to.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is that an attacker could exploit it to read arbitrary files on the affected system. This could lead to unauthorized access to sensitive information, potentially exposing confidential data or system files.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves an arbitrary file read via the feature::LOADFEATUREFILE adminbin call when a relative file path is passed. Detection would involve verifying the cPanel version to see if it is vulnerable.

You can check your current cPanel version using the command:

• /usr/local/cpanel/cpanel -V

If the version is older than 11.136.0.9, your system may be vulnerable.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should update your cPanel & WHM installation to a patched version.

• Run the update command: /scripts/upcp --force
• Verify the update with: /usr/local/cpanel/cpanel -V

For users on older systems like CentOS 6 or CloudLinux 6, update directly to version v110.0.114.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows arbitrary file read through insufficient input validation, potentially exposing sensitive files to unauthorized access.

Such unauthorized disclosure of sensitive information could lead to non-compliance with data protection regulations like GDPR and HIPAA, which require strict controls over access to personal and protected health information.

Therefore, if exploited, this vulnerability may compromise confidentiality obligations under these standards.

Useful 0 Not Useful 0