Skip to content
OpenAdvisories
High · 8.2 CVE-2022-0860 EUVD-2022-0039GHSA-mcg6-h362-cmq5PYSEC-2022-177

Improper Authorization in cobbler/cobbler

Published Mar 11, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: cobbler Product: cobbler/cobbler Package: cobbler Package: cobbler Ecosystem: PyPI Ecosystem: Ubuntu

Description

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.

Affected products

VendorProductAffectedFixed
cobbler cobbler/cobbler unspecified – < 3.3.2 3.3.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS cobbler 2.4.1-0ubuntu2+esm1 USN-6475-1

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SUSE Manager Server Module 4.3 cobbler 3.3.3-150400.5.7.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 drools 7.17.0-150400.3.6.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 image-sync-formula 0.1.1661440542.6cbe0da-150400.3.6.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 inter-server-sync 0.2.3-150400.3.6.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 locale-formula 0.3-150400.3.3.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 python-magic 5.32-150000.7.16.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 python-schema 0.6.7-150400.10.3.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 python-urlgrabber 4.1.0-150400.3.6.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 reprepro 5.4.0-150400.3.6.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 saltboot-formula 0.1.1661440542.6cbe0da-150400.3.3.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacecmd 4.3.15-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-admin 4.3.10-150400.3.3.2 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-backend 4.3.16-150400.3.6.8 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-certs-tools 4.3.15-150400.3.6.2 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-client-tools 4.3.12-150400.3.6.6 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-java 4.3.38-150400.3.8.3 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-search 4.3.7-150400.3.6.2 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-setup 4.3.12-150400.3.8.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-utils 4.3.14-150400.3.6.3 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 spacewalk-web 4.3.24-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 subscription-matcher 0.29-150400.3.7.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 susemanager 4.3.19-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 susemanager-build-keys 15.4.3-150400.3.6.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 susemanager-docs_en 4.3-150400.9.6.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 susemanager-schema 4.3.14-150400.3.6.5 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 susemanager-sls 4.3.25-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 susemanager-sync-data 4.3.9-150400.3.3.1 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 susemanager-tftpsync 4.3.2-150400.3.3.4 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 uyuni-common-libs 4.3.6-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.3 uyuni-reportdb-schema 4.3.6-150400.3.3.6 SUSE-SU-2022:3750-1
SUSE Manager Server Module 4.2 cobbler 3.1.2-150300.5.19.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 drools 7.17.0-150300.4.9.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 grafana-formula 0.8.1-150300.3.9.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 inter-server-sync 0.2.7-150300.8.28.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 mgr-osad 4.2.9-150300.2.12.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 prometheus-formula 0.7.0-150300.3.17.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 py27-compat-salt 3000.3-150300.7.7.29.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 rhnlib 4.2.7-150300.4.12.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 salt-netapi-client 0.21.0-150300.3.12.4 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 saltboot-formula 0.1.1676908681.e90e0b1-150300.3.15.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 smdba 1.7.11-0.150300.3.12.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacecmd 4.2.21-150300.4.33.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacewalk-admin 4.2.13-150300.3.18.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacewalk-backend 4.2.26-150300.4.35.6 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacewalk-certs-tools 4.2.19-150300.3.27.4 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacewalk-client-tools 4.2.22-150300.4.30.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacewalk-java 4.2.47-150300.3.58.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacewalk-search 4.2.9-150300.3.15.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 spacewalk-web 4.2.32-150300.3.36.4 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 supportutils-plugin-susemanager 4.2.5-150300.3.9.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 susemanager 4.2.40-150300.3.49.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 susemanager-build-keys 15.3.6-150300.3.6.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 susemanager-doc-indexes 4.2-150300.12.39.4 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 susemanager-docs_en 4.2-150300.12.39.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 susemanager-schema 4.2.27-150300.3.35.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 susemanager-sls 4.2.31-150300.3.43.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 uyuni-common-libs 4.2.9-150300.3.14.1 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 virtual-host-gatherer 1.0.24-150300.3.9.2 SUSE-SU-2023:0592-1
SUSE Manager Server Module 4.2 woodstox 4.4.2-150300.3.6.2 SUSE-SU-2023:0592-1
SUSE Manager Server 4.3 release-notes-susemanager 4.3.2-150400.3.15.1 SUSE-SU-2022:3761-1
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Manager Retail Branch Server 4.3 release-notes-susemanager-proxy 4.3.2-150400.3.9.3 SUSE-SU-2022:3761-1
SUSE Manager Proxy Module 4.3 mgr-daemon +1 4.3.6-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.3 spacecmd 4.3.15-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.3 spacewalk-backend 4.3.16-150400.3.6.8 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.3 spacewalk-certs-tools 4.3.15-150400.3.6.2 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.3 spacewalk-client-tools 4.3.12-150400.3.6.6 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.3 spacewalk-web 4.3.24-150400.3.6.4 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.3 susemanager-build-keys 15.4.3-150400.3.6.1 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.3 susemanager-tftpsync-recv 4.3.7-150400.3.3.3 SUSE-SU-2022:3750-1
SUSE Manager Proxy Module 4.2 mgr-osad 4.2.9-150300.2.12.2 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 rhnlib 4.2.7-150300.4.12.2 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 spacecmd 4.2.21-150300.4.33.2 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 spacewalk-backend 4.2.26-150300.4.35.6 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 spacewalk-certs-tools 4.2.19-150300.3.27.4 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 spacewalk-client-tools 4.2.22-150300.4.30.2 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 spacewalk-proxy 4.2.13-150300.3.24.2 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 spacewalk-proxy-installer 4.2.11-150300.3.14.2 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 spacewalk-web 4.2.32-150300.3.36.4 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 susemanager-build-keys 15.3.6-150300.3.6.2 SUSE-SU-2023:0592-1
SUSE Manager Proxy Module 4.2 uyuni-common-libs 4.2.9-150300.3.14.1 SUSE-SU-2023:0592-1
SUSE Manager Proxy 4.3 release-notes-susemanager-proxy 4.3.2-150400.3.9.3 SUSE-SU-2022:3761-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed cobbler 3.3.2.0+git.9044aa99-1.1 openSUSE-SU-2024:11904-1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI cobbler < 3.3.2 3.3.2 GHSA-mcg6-h362-cmq5

Advisories 6

References