CVE-2021-38587
7.5 HIGHIn cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586)
Published: 2021-08-11 · Last updated: 2026-06-17
Severity and scoring
- CVSS
- 7.5 HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CWE
- CWE-362
Affected products
| Vendor | Product |
|---|---|
| cpanel | cpanel |
Description
In cPanel before 96.0.13, scripts/fix-cpanel-perl mishandles the creation of temporary files (SEC-586).
Source: NVD
References
- [NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-38587
- [Vendor advisory]https://docs.cpanel.net/changelogs/96-change-log/
- [Vendor advisory]https://docs.cpanel.net/changelogs/96-change-log/
Related CVEs
Same vendor
- CVE-2021-38590 — In cPanel before 96.0.8, weak permissions on web stats can lead to information disclosure (SEC-584) (5.5 MEDIUM)
- CVE-2021-38589 — In cPanel before 96.0.13, scripts/fix-cpanel-perl does not properly restrict the overwriting of files (SEC-588) (8.1 HIGH)
- CVE-2021-38588 — In cPanel before 96.0.13, fix_cpanel_perl lacks verification of the integrity of downloads (SEC-587) (8.1 HIGH)
- CVE-2021-38586 — In cPanel before 98.0.1, /scripts/cpan_config performs unsafe operations on files (SEC-589) (4.4 MEDIUM)
- CVE-2021-38585 — The WHM Locale Upload feature in cPanel before 98.0.1 allows unserialization attacks (SEC-585) (7.2 HIGH)
Same CWE
- CVE-2025-13036 — An authentication bypass security issue exists within FactoryTalk Historian Site Edition
- CVE-2026-48708 — OliveTin gives access to predefined shell commands from a web interface (7.5 HIGH)
- CVE-2026-54229 — A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method (7.0 HIGH)
- CVE-2026-12022 — Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process ... (8.3 HIGH)
- CVE-2026-46693 — ImageMagick is free and open-source software used for editing and manipulating digital images (4.1 MEDIUM)