Lucene search
GitHub Advisory DatabaseGHSA-F88Q-22G8-FRCGHistoryMay 13, 2022 - 1:48 a.m.
Cobbler Improper Validation of Security Tokens
2022-05-1301:48:35
CWE-732
GitHub Advisory Database
github.com
7
0.013 Low
EPSS
Percentile
85.9%
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation or exfiltration, LDAP credential harvesting. This attack appear to be exploitable via “network connectivity”. Taking advantage of improper validation of security tokens in API endpoints. Please note this is a different issue than CVE-2018-10931.
Related
osv
osv
Cobbler Improper Validation of Security Tokens
2022-05-13 01:48:35
CVE-2018-10931
2018-08-09 20:29:00
Cobbler has Exposed Dangerous Method or Function
2022-05-13 01:54:14
fedora
fedora
[SECURITY] Fedora 29 Update: cobbler-2.8.5-0.1.fc29
2019-09-11 21:18:50
[SECURITY] Fedora 29 Update: cobbler-2.8.4-5.fc29
2018-12-05 02:36:46
[SECURITY] Fedora 28 Update: cobbler-2.8.4-5.fc28
2018-12-05 01:58:03
cve
cve
CVE-2018-1000226
2018-08-20 20:29:00
CVE-2018-10931
2018-08-09 20:29:00
prion
prion
Design/Logic Flaw
2018-08-20 20:29:00
Design/Logic Flaw
2018-08-09 20:29:00
openvas
openvas
Fedora Update for cobbler FEDORA-2018-1d2a79fe1c
2018-12-05 00:00:00
Fedora Update for cobbler FEDORA-2019-cd24f60a94
2019-09-13 00:00:00
Fedora Update for cobbler FEDORA-2018-22c609e92a
2019-05-07 00:00:00
nuclei
nuclei
Cobbler - Authentication Bypass
2022-02-14 17:20:32
nessus
nessus
Fedora 29 : cobbler (2018-22c609e92a)
2019-01-03 00:00:00
Fedora 28 : cobbler (2018-1d2a79fe1c)
2019-01-03 00:00:00
openSUSE Security Update : cobbler (openSUSE-2018-952)
2018-09-04 00:00:00
gitlab
gitlab
Incorrect Permission Assignment for Critical Resource
2022-05-13 00:00:00
Exposed Dangerous Method or Function
2022-05-13 00:00:00
ubuntucve
ubuntucve
CVE-2018-1000226
2018-08-20 00:00:00
CVE-2018-10931
2018-08-09 00:00:00
cvelist
cvelist
CVE-2018-1000226
2018-08-20 20:00:00
CVE-2018-10931
2018-08-09 20:00:00
suse
suse
Security update for cobbler (important)
2018-09-03 15:07:54
Security update for cobbler (moderate)
2021-01-11 00:00:00
Security update for cobbler (moderate)
2021-01-14 00:00:00
redhatcve
redhatcve
CVE-2018-1000226
2018-08-22 07:49:00
CVE-2018-10931
2018-08-09 15:18:52
github
github
Cobbler has Exposed Dangerous Method or Function
2022-05-13 01:54:14
veracode
veracode
Arbitrary File Upload
2019-01-15 09:24:32
redhat
redhat
(RHSA-2018:2372) Critical: cobbler security update
2018-08-09 15:32:57
ubuntu
ubuntu
Cobbler vulnerabilities
2023-11-13 00:00:00