Cobbler Project vulnerabilities

Products

• Cobbler 12

Newest

• cobbler Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes CVE-2024-47533 Public exploitFix available 9.8 CriticalNovember 18, 2024
• cobbler cobbler/cobbler, cobbler project cobbler, fedoraproject fedora +2 more Improper Authorization in cobbler/cobbler CVE-2022-0860 Fix available 8.2 HighMarch 11, 2022
• cobbler project cobbler An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol... CVE-2021-45081 5.9 MediumFebruary 20, 2022
• cobbler project cobbler, fedoraproject fedora, opensuse backports +2 more +4 more Command Injection in Cobbler CVE-2021-45082 Fix available 7.8 HighFebruary 18, 2022
• cobbler project cobbler, fedoraproject fedora +1 more Incorrect Default Permissions in Cobbler CVE-2021-45083 Fix available 7.1 HighFebruary 18, 2022
• cobbler project cobbler Cobbler before 3.3.0 allows authorization bypass for modification of settings. CVE-2021-40325 Fix available 7.5 HighSeptember 20, 2021
• cobbler project cobbler Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. CVE-2021-40324 Fix available EPSS 68.6% 7.5 HighSeptember 20, 2021
• cobbler project cobbler Cobbler before 3.3.0 allows log poisoning CVE-2021-40323 Fix available EPSS 86.8% 9.8 CriticalSeptember 20, 2021
• cobbler, redhat satellite +1 more Cobbler has Exposed Dangerous Method or Function CVE-2018-10931 Fix available EPSS 68.1% 9.8 CriticalAugust 9, 2018
• cobbler project cobbler Cobbler vulnerable to arbitrary code execution CVE-2017-1000469 Fix available 9.8 CriticalJanuary 3, 2018
• cobbler Cobbler Arbitrary File Read CVE-2016-9605 Fix available 6.1 MediumJune 26, 2017
• cobbler project cobbler Cobbler vulnerable to code injection via unsafe YAML loading CVE-2011-4953 Fix available 6.8 MediumOctober 27, 2014