PT-2018-17672 · Unknown · Easy Hosting Control Panel

Published 2018-05-11 · Updated 2019-10-03 · CVE-2018-6618

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel (EHCP) version 0.37.12.b

Description The issue allows attackers to obtain sensitive information by leveraging cleartext password storage.

Recommendations For Easy Hosting Control Panel (EHCP) version 0.37.12.b, consider updating the password storage mechanism to a more secure method, such as hashed password storage, to prevent attackers from obtaining sensitive information.

Exploit

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2018-6618

Affected Products

Easy Hosting Control Panel

References · 4

• 🔥 http://hyp3rlinx.altervista.org/advisories/EHCP-v0.37.12.b-CLEARTEXT-PASSWORD-STORAGE.txt · Exploit
• 🔥 http://packetstormsecurity.com/files/147557/Easy-Hosting-Control-Panel-0.37.12.b-Clear-Text-Password-Storage.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-6618 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6618 · Vendor Advisory