Skip to content
OpenAdvisories

Package · PyPI

cobbler

18 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-47533 Public exploit Scanner template

    Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes

    Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1…

  • Medium —
    CVE-2014-3225 Public exploit

    Cobbler Path Traversal vulnerability

    Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.