Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-15B4E7651D744B470F164064C9B31F21
HistoryMay 17, 2022 - 12:00 a.m.

Improper Control of Generation of Code ('Code Injection')

2022-05-1700:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
9

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.3%

JSON

CVE-2010-2235 RHN Satellite (cobbler): Code injection flaw (ACE as root) by processing of a specially-crafted kickstart template file

Affected configurations

Vulners
Node
pypiml-scannerRange<2.0.7pypi
CPENameOperatorVersion
pypi/cobblerlt2.0.7

Related

redhat 1
veracode 1
prion 1
cve 1
github 1
cvelist 1
nvd 1
nessus 1
osv 1
redhat
redhat
(RHSA-2010:0775) Important: cobbler security update
2010-10-18 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2020-04-10 00:47:40
prion
prion
Design/Logic Flaw
2010-12-09 20:00:00
cve
cve
CVE-2010-2235
2010-12-09 20:00:17
github
github
Cobbler is vulnerable to code injection
2022-05-17 05:45:48
cvelist
cvelist
CVE-2010-2235
2010-12-09 19:00:00
nvd
nvd
CVE-2010-2235
2010-12-09 20:00:17
nessus
nessus
RHEL 4 / 5 : cobbler (RHSA-2010:0775)
2010-10-18 00:00:00
osv
osv
Cobbler is vulnerable to code injection
2022-05-17 05:45:48

8.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.007 Low

EPSS

Percentile

80.3%

JSON
Related for GITLAB-15B4E7651D744B470F164064C9B31F21
redhat1veracode1prion1cve1github1cvelist1nvd1nessus1osv1