Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2023-0391

MGT-COMMERCE CloudPanel Shared Certificate

Description

MGT-COMMERCE CloudPanel ships with a static SSL certificate to encrypt communications to the administrative interface, shared across every installation of CloudPanel. This behavior was observed in version 2.2.0. There has been no indication from the vendor this has been addressed in version 2.2.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MGT-COMMERCE CloudPanel

Default version status: unaffected

  • 0 to ≤ 2.2.0affected

References