Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
CyberPanel RCE (CVE-2024-51567/CVE-2024-51568/CVE-2024-51378) - Vulnerability Database

CyberPanel RCE (CVE-2024-51567/CVE-2024-51568/CVE-2024-51378)

Description

CyberPanel contains an authentication bypass vulnerability that could allow an unauthenticated attacker to access restricted functionality and exploit RCE vulnerabilities to compromise the system.

Remediation

Upgrade to the latest version of CyberPanel.

References

What Are My OPTIONS? CyberPanel v2.3.6 pre-auth RCE
Details and fix of recent security issue and patch of CyberPanel

Related Vulnerabilities

Security update: Hotfix available for ColdFusion High
Common tags: Known Vulnerabilities Code Execution Authentication Bypass
Cacti Unauthenticated Command Injection (CVE-2022-46169) Critical
Common tags: Known Vulnerabilities Code Execution Authentication Bypass
Ivanti Sentry Authentication Bypass (CVE-2023-38035) Critical
Common tags: Known Vulnerabilities Code Execution Authentication Bypass
Oracle Sun GlassFish/Java System Application Server Remote Authentication Bypass Vulnerability High
Common tags: Known Vulnerabilities Code Execution Authentication Bypass
Apache OFBiz RCE (CVE-2024-45195) Critical
Common tags: Known Vulnerabilities Code Execution Authentication Bypass

Severity

Critical

Classification

CVE-2024-51567
CVE-2024-51568
CVE-2024-51378
CWE-306
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Tags

Known Vulnerabilities
Code Execution
Authentication Bypass