Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 504
Alerts This Week
Warning Icon 1 504

Control Web Panel Critical Advisory: RCE Threats Identified

Calendar Jan 25, 2022 • User Avatar Brittany Day
1 min read
2.Motherboard Esm H446
Topics%20covered

Topics Covered

security advisory critical issue remote code execution file inclusion Control Web Panel

Researchers have disclosed details of two critical security vulnerabilities (CVE-2021-45467) in Control Web Panel, an open-source Linux control panel software used for deploying web hosting environments, that could be abused as part of an exploit chain to achieve pre-authenticated remote code execution (RCE) on affected servers.

Tracked as CVE-2021-45467, the issue concerns a case of a file inclusion vulnerability, which occurs when a web application is tricked into exposing or running arbitrary files on the web server.

Control Web Panel, previously CentOS Web Panel, is an open-source Linux control panel software used for deploying web hosting environments.

The link for this article located at The Hacker News is no longer available.