CoreCVE
Back

MEDIUM

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an attacker account

Published Aug 21, 2019

Description

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an attacker account.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-639

Authorization Bypass

References (5)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Aug 21, 2019
Updated Aug 5, 2024
Reserved Jul 23, 2019
Link CVE-2019-14246

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-14246

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Aug 21, 2019
Updated Aug 5, 2024
Link EUVD-2019-5486

GitHub

No data