LiveActive security incident?Get immediate response
CVE Record

CVE-2019-14395: cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494).

cPanel before 80.0.5 uses world-readable permissions for the Queueprocd log (SEC-494).

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

cPanel versions before 80.0.5 made the Queueprocd log readable by all local users. For executives, this is mainly an information exposure issue: risk depends on what the log contains and who has local account access on the server.

Executive priority

Prioritize remediation on shared hosting or multi-tenant cPanel servers. Single-tenant systems with tightly controlled local access are lower urgency, but still should be updated through normal patch processes.

Technical view

CVE-2019-14395 describes world-readable permissions on the Queueprocd log in cPanel before 80.0.5. The available sources do not provide CVSS, CWE, exploit details, or log-content specifics. Treat it as local information disclosure until vendor guidance indicates otherwise.

Likely exposure

Likely exposure is cPanel servers running versions earlier than 80.0.5, especially shared or multi-user hosting systems where unprivileged local users exist.

Exploitation context

The source bundle does not show active exploitation, KEV listing, public exploit status, or remote attackability. The concern is unauthorized local reading of a cPanel service log.

Researcher notes

Evidence is sparse: the CVE description only states world-readable Queueprocd log permissions before cPanel 80.0.5. No CVSS vector, CWE mapping, exploitability notes, or affected CPEs are provided in the bundle.

Mitigation direction

  • Upgrade affected cPanel installations to 80.0.5 or later.
  • Review the cPanel 80 change log and vendor advisories for SEC-494 guidance.
  • Restrict local shell/user access where possible on shared hosting systems.
  • Check Queueprocd log permissions against vendor-supported defaults.

Validation and detection

  • Inventory cPanel versions and identify systems below 80.0.5.
  • Verify Queueprocd log permissions are not world-readable.
  • Review local user access on affected servers.
  • Check change-management records for cPanel 80.0.5 or later deployment.
Prepared
Confidence
medium
Sources
3

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2019-14395 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
2Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.