WHM AutoPilot Clogin.PHP Username/Password Information Disclosure Vulnerability

Bugtraq ID:	10846
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 03 2004 12:00AM
Updated:	Aug 03 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to an individual named "MS Blows".
Vulnerable:	WHM Autopilot WHM Autopilot 2.4.5
Not Vulnerable:

WHM AutoPilot Clogin.PHP Username/Password Information Disclosure Vulnerability

WHM AutoPilot is reported prone to an information disclosure vulnerability. The issue is reported to exist due to a vulnerability in the functionality provided to permit an administrator to logon to WHM AutoPilot as another user.

It is reported that this vulnerability may be exploited by a remote attacker to disclose WHM AutoPilot usernames and passwords.

WHM AutoPilot Clogin.PHP Username/Password Information Disclosure Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WHM AutoPilot Clogin.PHP Username/Password Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

WHM AutoPilot Clogin.PHP Username/Password Information Disclosure Vulnerability

References:

• WHM AutoPilot Homepage (WHM AutoPilot)