The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Security bug in cPanel login

Discussion in 'Security' started by jdr, May 22, 2012.

  1. jdr

    jdr Registered

    Joined:
    May 22, 2012
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    51
    cPanel Access Level:
    Reseller Owner
    Hi,

    turns out this is probably the easiest way to report a problem...

    You have (what I'd consider) a security bug in your cPanel login system. On a reseller account (for example) if a user has the same password as the administrator then even if the user logs into their site with their username and their password (which happens to be the same as the admin) then they get logged in as the admin! = Not good!!

    James
     
    #1 jdr, May 22, 2012
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,553
    Likes Received:
    291
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hi, not really. This is the proper way: http://go.cpanel.net/bugs


    I believe this thread from back in 2008 should shed some light on your post though:
    User password the same as root issue - cPanel Forums

    Or more precisely this Documentation:
    Accounts that can access a cPanel user account - cPanel Documentation

    You'll find the setting to change this located here:
    WHM > Server Configuration > Tweak Settings, System Tab, first item at top:
    Accounts that can access a cPanel user account: cPanel User Only (might be best at all times unless otherwise needed)

    Hope that helps!
     
    #2 Infopro, May 22, 2012
(You must log in or sign up to post here.)
Loading...
Similar Threads - Security cPanel login
  1. jndawson

    SOLVED Mod Security rule changes in cPanel 64

    jndawson, Mar 29, 2017, in forum: General Discussion
    Replies:
    4
    Views:
    298
    cPanelMichael
    Mar 30, 2017
  2. Boris Horvat

    cPanel Security Advisor Issue

    Boris Horvat, Mar 1, 2017, in forum: Security
    Replies:
    22
    Views:
    907
    cPanelMichael
    Apr 25, 2017
  3. ksgalicia

    SOLVED cPanel Security Advisor & EA4

    ksgalicia, Jan 7, 2017, in forum: Discusión en Español
    Replies:
    13
    Views:
    583
    cPanelMichael
    Jan 26, 2017
  4. EneTar

    Horde with cPanel session security tokens

    EneTar, Dec 12, 2016, in forum: E-mail Discussions
    Replies:
    2
    Views:
    430
    EneTar
    Dec 12, 2016
  5. bouvrie

    cPanel Server Security & Management Best Practices?

    bouvrie, Dec 2, 2016, in forum: Security
    Replies:
    1
    Views:
    448
    cPanelMichael
    Dec 2, 2016

Share This Page