CVE Catalog
CVE-2017-6513
CriticalSummary
The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify users correctly, allowing remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.
Risk Assessment
This vulnerability may lead to unauthorized access to virtual machines, posing a serious threat to the security of organizational data and resources.
Recommendation
It is recommended to upgrade to Softaculous Virtualizor version 2.9.1.0 or later to mitigate this vulnerability.
Original NVD description (English source)
The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizor before 2.9.1.0 does not verify the user correctly, which allows remote authenticated users to control other virtual machines managed by Virtualizor by accessing a modified URL.