Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Security bug in cPanel login

Discussion in 'Security' started by jdr, May 22, 2012.

  1. jdr

    jdr Registered

    Joined:
    May 22, 2012
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    51
    cPanel Access Level:
    Reseller Owner
    Hi,

    turns out this is probably the easiest way to report a problem...

    You have (what I'd consider) a security bug in your cPanel login system. On a reseller account (for example) if a user has the same password as the administrator then even if the user logs into their site with their username and their password (which happens to be the same as the admin) then they get logged in as the admin! = Not good!!

    James
     
    #1 jdr, May 22, 2012
  2. Infopro

    Infopro cPanel Sr. Product Evangelist Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,741
    Likes Received:
    456
    Trophy Points:
    583
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hi, not really. This is the proper way: http://go.cpanel.net/bugs


    I believe this thread from back in 2008 should shed some light on your post though:
    User password the same as root issue - cPanel Forums

    Or more precisely this Documentation:
    Accounts that can access a cPanel user account - cPanel Documentation

    You'll find the setting to change this located here:
    WHM > Server Configuration > Tweak Settings, System Tab, first item at top:
    Accounts that can access a cPanel user account: cPanel User Only (might be best at all times unless otherwise needed)

    Hope that helps!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 Infopro, May 22, 2012
(You must log in or sign up to post here.)
Loading...
Similar Threads - Security cPanel login
  1. rpvw

    Pending Publication [CPANEL-25973] Security Advisor does not recognize KernelCare patch on CloudLinux

    rpvw, Mar 18, 2019 at 11:56 AM, in forum: CloudLinux
    Replies:
    1
    Views:
    96
    cPanelMichael
    Mar 18, 2019 at 1:59 PM
  2. WorkinOnIt

    In Progress [CPANEL-24474] Offer advice in the Security Advisor when the "KernelCare Gap" is in effect

    WorkinOnIt, Dec 16, 2018, in forum: General Discussion
    Replies:
    4
    Views:
    151
    cPanelMichael
    Dec 18, 2018
  3. Shipon

    cPanel security

    Shipon, Nov 20, 2018, in forum: Security
    Replies:
    1
    Views:
    145
    cPanelMichael
    Nov 21, 2018
  4. Nirjonadda

    In Progress [CPANEL-23606] cPanel Security Advisor missing kernel information when kernelcare is installed

    Nirjonadda, Oct 19, 2018, in forum: General Discussion
    Replies:
    12
    Views:
    390
    cPanelLauren
    Dec 12, 2018
  5. ottdev

    cPanel's implementation of Mod_Security

    ottdev, Aug 8, 2018, in forum: Security
    Replies:
    2
    Views:
    383
    cPanelLauren
    Aug 10, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice