cPanel 11.18.1-EDGE_20683 - Resellers could take control of the DNS zone of the server's hostname


Resellers could use the "Modify an Account" feature in WHM to change the domain name of any of their accounts to that of the server's hostname. They would then have the ability to edit that zone via WHM.


Various attacks are possible when controlling a DNS zone.