TI-2022-00766 CVE-2022-0860 · GHSA-mcg6-h362-cmq5
Improper Authorization in cobbler/cobbler
Priority MEDIUM 44
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
Vulnerabilities
11 records
TI-2021-20417 CVE-2021-45083 · GHSA-5946-mpw5-pqxx
An issue was discovered in Cobbler before 3.3.1.
Priority LOW 31
An issue was discovered in Cobbler before 3.3.1.
TI-2021-20415 CVE-2021-45081 · GHSA-332r-78jx-2j2m
An issue was discovered in Cobbler through 3.3.1.
Priority LOW 29
An issue was discovered in Cobbler through 3.3.1.
TI-2021-20416 CVE-2021-45082 · GHSA-6cm4-gm85-972c
An issue was discovered in Cobbler before 3.3.1.
Priority LOW 35
An issue was discovered in Cobbler before 3.3.1.
TI-2021-17399 CVE-2021-40325 · GHSA-cr3f-r24j-3chw
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
Priority LOW 36
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
TI-2021-17398 CVE-2021-40324 · GHSA-4cfr-gjfx-fj3x
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
Priority HIGH 70
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
TI-2021-17397 CVE-2021-40323 · GHSA-cpqf-3c3r-c9g2
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an…
Priority HIGH 84
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
TI-2016-07826 CVE-2016-9605 · GHSA-4vc9-4xpq-77vm
Cross-site scripting in cobbler
Priority LOW 29
A flaw was found in cobbler software component version 2.6.11-1.
TI-2018-07743 CVE-2018-10931 · GHSA-8787-63px-3m23
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface…
Priority HIGH 79
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC.
TI-2017-14678 CVE-2017-1000469 · GHSA-96hw-v598-jvgh
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the…
Priority MEDIUM 51
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.
TI-2011-04263 CVE-2011-4953 · GHSA-hpj3-5p46-g87w
The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows…
Priority LOW 34
The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load func…