NVD-CWE-noinfo

cPanel before 78.0.2 reveals internal data to OpenID providers (SEC-415).

cPanel before 78.0.2 allows a demo account to link with an OpenID provider (SEC-460).

cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin (SEC-466).

cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI (SEC-473).

cPanel before 78.0.2 allows certain file-write operations as shared users during connection resets (SEC-476).

In cPanel before 78.0.2, a Userdata cache temporary file can conflict with domains (SEC-478).