Red Hat Security Advisory

RHSA-2012:1060

cobbler security update

Released 2012-07-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Satellite 5.4 (RHEL v.5) cobbler-2.0.7-14.6.el5sat
Red Hat Satellite 5.4 (RHEL v.6) cobbler-2.0.7-14.6.el6sat

Fixes 1 record

TI-2012-02122 CVE-2012-2395 · GHSA-g34c-mg6m-xvxj

Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote…

MEDIUM 41

Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05538 Published 2012-06-16 Fixed in 2.6.0 CWE-77