Skip to content
OpenAdvisories
Critical RHSA-2018:2372 1 CVE

Red Hat Security Advisory: cobbler security update

Published Sep 16, 2024 · Updated Jul 1, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Network Satellite 5 network_satellite:5.6::el6 cobbler 0:2.0.7-44.1.el6sat
Red Hat · Network Satellite 5 network_satellite:5.7::el6 cobbler 0:2.0.7-68.1.el6sat
Red Hat · Network Satellite 5 network_satellite:5.8::el6 cobbler 0:2.0.7-73.el6sat

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-10931 EPSS 68%

    Cobbler has Exposed Dangerous Method or Function

    It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the da…

    The cobbler Project cobbler cobbler cobbler Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1613861
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2372.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-10931
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-10931
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-10931