Major authentication bypass disclosed in cPanel

[campuscodi@mastodon.social]

Major authentication bypass disclosed in cPanel

Just a moment...

(support.cpanel.net)

[chetwisniewski@securitycafe.ca]

@campuscodi cPanel has authentication!? Next you will suggest phpBB does as well. #snark

[briankrebs@infosec.exchange]

@campuscodi Probably a lot of sites are going to get pwned before this patch is fully deployed.

[campuscodi@mastodon.social]

@briankrebs good thing I borked the wife's website before it could get hacked then

[jmeyer@infosec.exchange]

@campuscodi Saw a ~6 Tbps attack this morning with about 5k hosting sources, which had one thing in common: cPanel

[geoffl@mastodon.me.uk]

@campuscodi The only way to ever get cPanel to work the way you wanted was to was bypass its controls. Without that it's nothing.