Download Integrity Verification Issue in cPanel by cPanel, Inc.
CVE-2021-38588

8.1HIGH

Key Information:

Vendor
Cpanel
Status
Cpanel
Vendor
CVE Published:
11 August 2021

Summary

A vulnerability in cPanel before version 96.0.13 arises from the fix_cpanel_perl script, which fails to verify the integrity of downloads, potentially allowing malicious files to be executed without detection. This oversight could lead to unauthorized access and compromise of sensitive data.

References

https://docs.cpanel.net/changelogs/96-change-log/
x_refsource_MISC

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.