QSearchQSearch

CVE-2021-38586

4.4 MEDIUM

In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589)

Published: 2021-08-11 · Last updated: 2026-06-17

Severity and scoring

CVSS
4.4 MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Affected products

VendorProduct
cpanelcpanel

Description

In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589).

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2021-38590 — In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584) (5.5 MEDIUM)
  • CVE-2021-38589 — In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588) (8.1 HIGH)
  • CVE-2021-38588 — In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587) (8.1 HIGH)
  • CVE-2021-38587 — In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586) (7.5 HIGH)
  • CVE-2021-38585 — The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585) (7.2 HIGH)