VULNERABILITY INTELLIGENCE

CVE-2019-14246

CVSS score6.5 MEDIUM

EPSS probability2.22%

CISA KEVNot currently listed

Published2019-08-21

Last modified2026-06-17

Description

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to discover phpMyAdmin passwords (of any user in /etc/passwd) via an attacker account.