CVE-2019-14782 - CVE House
Back to Database
Status published Medium CVE-2019-14782

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows...

Vulnerability Description

CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.856 through 0.9.8.864 allows an attacker to get a victim's session file name from the /tmp directory, and the victim's token value from /usr/local/cwpsrv/logs/access_log, then use them to make a request to extract the victim's password (for the OS and phpMyAdmin) via an attacker account.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-14782

Credits & Attribution

No credits recorded in the NVD database.

References

More from control-webpanel

View All →
CVE-2022-44877
login/index.php in CWP (aka Control Web Panel or CentOS Web...
Unknown 0
CVE-2022-25048
Command injection vulnerability in CWP v0.9.8.1126 that allows normal users...
High 8.8
CVE-2022-25047
The password reset token in CWP v0.9.8.1126 is generated using...
Medium 5.9
CVE-2022-25046
A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows...
Critical 9.8
CVE-2021-45467
In CWP (aka Control Web Panel or CentOS Web Panel)...
Unknown 0

Affected Vendor

control-webpanel

View all reports →

Affected Software

webpanel
Vulnerable Versions:
0.9.8.856

Timeline

Official Publish: December 17th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.