cPanel and WHM DNS Cluster SSL Verification Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability exists in the DNS Cluster system of cPanel and WHM, specifically in versions 126 and higher, where SSL verification is not properly enforced. This flaw could enable a malicious server to intercept requests and capture credentials. The issue has been addressed in cPanel & WHM versions 11.126.0.59 and higher, 11.130.0.23 and higher, 11.132.0.32 and higher, 11.134.0.26 and higher, and 11.136.0.10 and higher. WP Squared version 11.136.1.12 and higher also includes the patch.

Impact

Exploitation of this vulnerability could lead to unauthorized interception of requests and capture of credentials, allowing for potential unauthorized access or actions on behalf of the user.

Remediation

To address this vulnerability, update cPanel to version 11.126.0.59 or higher, 11.130.0.23 or higher, 11.132.0.32 or higher, 11.134.0.26 or higher, or 11.136.0.10 or higher. For WP Squared, update to version 11.136.1.12 or higher.