cobbler

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-47533 Public exploit Scanner template

  Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes

  Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1…

  cobbler cobbler cobbler PyPI
  Nov 18, 2024
• Critical 9.8
  CVE-2021-40323 Scanner template EPSS 87%

  Cobbler before 3.3.0 allows log poisoning

  Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

  cobbler cobbler Ubuntu PyPI
  Oct 4, 2021
• Critical 9.8
  CVE-2018-1000226 Scanner template EPSS 13%

  Cobbler Improper Validation of Security Tokens

  Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in P…

  cobbler cobbler Ubuntu PyPI
  Aug 20, 2018
• Critical 9.8
  CVE-2018-10931 EPSS 68%

  Cobbler has Exposed Dangerous Method or Function

  It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the da…

  The cobbler Project cobbler cobbler cobbler Ubuntu PyPI
  Aug 9, 2018
• Critical 9.8
  CVE-2017-1000469

  Cobbler vulnerable to arbitrary code execution

  Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.

  cobbler cobbler Ubuntu PyPI
  Jan 3, 2018