Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-P8W2-F44P-FMCJ
HistoryMay 17, 2022 - 2:10 a.m.

Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability

2022-05-1702:10:02
CWE-94
GitHub Advisory Database
github.com
4

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.0%

JSON

The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code with the root privileges in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.

Affected configurations

Vulners
Node
cobblercobblerRange<1.2.9
CPENameOperatorVersion
cobblerlt1.2.9

Related

prion 2
osv 2
gitlab 1
openvas 4
nvd 2
cvelist 2
nessus 3
cve 2
github 1
prion
prion
Code injection
2009-08-12 10:30:00
Design/Logic Flaw
2010-12-09 20:00:00
osv
osv
Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
2022-05-17 02:10:02
Cobbler is vulnerable to code injection
2022-05-17 05:45:48
gitlab
gitlab
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
2022-05-17 00:00:00
openvas
openvas
Fedora Update for cobbler FEDORA-2008-9723
2009-02-17 00:00:00
Fedora Update for cobbler FEDORA-2008-9723
2009-02-17 00:00:00
Fedora Update for cobbler FEDORA-2008-9745
2009-02-17 00:00:00
nvd
nvd
CVE-2008-6954
2009-08-12 10:30:00
CVE-2010-2235
2010-12-09 20:00:17
cvelist
cvelist
CVE-2008-6954
2009-08-12 10:00:00
CVE-2010-2235
2010-12-09 19:00:00
nessus
nessus
Fedora 9 : cobbler-1.2.9-1.fc9 (2008-9745)
2008-11-21 00:00:00
Fedora 8 : cobbler-1.2.9-1.fc8 (2008-9723)
2008-11-21 00:00:00
RHEL 4 / 5 : cobbler (RHSA-2010:0775)
2010-10-18 00:00:00
cve
cve
CVE-2008-6954
2009-08-12 10:30:00
CVE-2010-2235
2010-12-09 20:00:17
github
github
Cobbler is vulnerable to code injection
2022-05-17 05:45:48

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.0%

JSON
Related for GHSA-P8W2-F44P-FMCJ
prion2osv2gitlab1openvas4nvd2cvelist2nessus3cve2github1