Back to Security Advisories
Security Advisory: CloudLinux $HTTP_HOST Environment Injection
A vulnerability in CloudLinux LVE Manager allowed environment variable injection via the $HTTP_HOST header, potentially leading to unauthorized access to protected resources.
High
CloudLinux
CloudLinux 7
CloudLinux 9
Affected Versions
7.4 and earlier
Patched Version
7.5
Default Update CMD
yum update -yFix Commands
CloudLinux 7
yum clean all
yum update cl-lveCloudLinux 9
dnf clean metadata
dnf update cl-lveA vulnerability in CloudLinux LVE Manager allowed environment variable injection via the $HTTP_HOST header, potentially leading to unauthorized access to protected resources.
References
Check your system for vulnerabilities
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
Check Your System