Skip to content
OpenAdvisories

Package · Ubuntu

cobbler

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-40323 Scanner template EPSS 87%

    Cobbler before 3.3.0 allows log poisoning

    Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

    cobbler cobbler Ubuntu PyPI
  • Critical 9.8
    CVE-2018-1000226 Scanner template EPSS 13%

    Cobbler Improper Validation of Security Tokens

    Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in P…

    cobbler cobbler Ubuntu PyPI
  • Critical 9.8
    CVE-2018-10931 EPSS 68%

    Cobbler has Exposed Dangerous Method or Function

    It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the da…

    The cobbler Project cobbler cobbler cobbler Ubuntu PyPI
  • Critical 9.8
    CVE-2017-1000469

    Cobbler vulnerable to arbitrary code execution

    Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.

    cobbler cobbler Ubuntu PyPI