Lucene search

K
cve[email protected]CVE-2009-5021
HistoryDec 09, 2010 - 8:00 p.m.

CVE-2009-5021

2010-12-0920:00:01
CWE-255
web.nvd.nist.gov
18
cobbler
cve-2009-5021
default password
vulnerability
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.7%

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.

Affected configurations

NVD
Node
michael_dehaancobblerRange1.4.3-4
OR
michael_dehaancobblerMatch0.1.1.7
OR
michael_dehaancobblerMatch0.2.1
OR
michael_dehaancobblerMatch0.2.2
OR
michael_dehaancobblerMatch0.2.3
OR
michael_dehaancobblerMatch0.2.5
OR
michael_dehaancobblerMatch0.2.7
OR
michael_dehaancobblerMatch0.2.8
OR
michael_dehaancobblerMatch0.2.9
OR
michael_dehaancobblerMatch0.3.0
OR
michael_dehaancobblerMatch0.3.1
OR
michael_dehaancobblerMatch0.3.3
OR
michael_dehaancobblerMatch0.3.4
OR
michael_dehaancobblerMatch0.3.5
OR
michael_dehaancobblerMatch0.3.6
OR
michael_dehaancobblerMatch0.3.7
OR
michael_dehaancobblerMatch0.3.9
OR
michael_dehaancobblerMatch0.4.0
OR
michael_dehaancobblerMatch0.4.2
OR
michael_dehaancobblerMatch0.4.3
OR
michael_dehaancobblerMatch0.4.5
OR
michael_dehaancobblerMatch0.4.6
OR
michael_dehaancobblerMatch0.4.7
OR
michael_dehaancobblerMatch0.4.8
OR
michael_dehaancobblerMatch0.5.0
OR
michael_dehaancobblerMatch0.6.0
OR
michael_dehaancobblerMatch0.6.1
OR
michael_dehaancobblerMatch0.6.3
OR
michael_dehaancobblerMatch0.6.4
OR
michael_dehaancobblerMatch0.6.5
OR
michael_dehaancobblerMatch0.8.1
OR
michael_dehaancobblerMatch0.8.3
OR
michael_dehaancobblerMatch1.0.0
OR
michael_dehaancobblerMatch1.0.2
OR
michael_dehaancobblerMatch1.0.2-1
OR
michael_dehaancobblerMatch1.0.3-1
OR
michael_dehaancobblerMatch1.2.0
OR
michael_dehaancobblerMatch1.2.2
OR
michael_dehaancobblerMatch1.2.3
OR
michael_dehaancobblerMatch1.2.5
OR
michael_dehaancobblerMatch1.2.6
OR
michael_dehaancobblerMatch1.2.7
OR
michael_dehaancobblerMatch1.2.8
OR
michael_dehaancobblerMatch1.2.8-1
OR
michael_dehaancobblerMatch1.2.9
OR
michael_dehaancobblerMatch1.2.9-1
OR
michael_dehaancobblerMatch1.3.1
OR
michael_dehaancobblerMatch1.3.1-1
OR
michael_dehaancobblerMatch1.3.3
OR
michael_dehaancobblerMatch1.3.3-1
OR
michael_dehaancobblerMatch1.3.4
OR
michael_dehaancobblerMatch1.3.4-1
OR
michael_dehaancobblerMatch1.4.0
OR
michael_dehaancobblerMatch1.4.0-2
OR
michael_dehaancobblerMatch1.4.1
OR
michael_dehaancobblerMatch1.4.1-1
OR
michael_dehaancobblerMatch1.4.2
OR
michael_dehaancobblerMatch1.4.2-1
OR
michael_dehaancobblerMatch1.4.3

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.7%

Related for CVE-2009-5021