PT-2019-7592 · Apache+1 · Apache Http Server+1

Published 2019-08-06 · Updated 2019-08-13 · CVE-2016-10796

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 58.0.4

Description The issue is related to weak permissions used for Apache HTTP Server log files.

Recommendations For versions prior to 58.0.4, update to version 58.0.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-275

Related Identifiers

CVE-2016-10796

Affected Products

Apache Http Server

Cpanel

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-10796 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10796 · Vendor Advisory
• https://documentation.cpanel.net/display/CL/58+Change+Log · Vendor Advisory