Lucene search
+L

1 matches found

osv-pysec
osv-pysec
•added 2026/06/29 11:50 a.m.•22 views

PYSEC-2026-316 cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

Summary utils.getsharedsecret always returns -1 - allows anyone to connect to cobbler XML-RPC as user '' password -1 and make any changes. Details utils.py getsharedsecret: def getsharedsecret - Unionstr, int: """ The 'web.ss' file is regenerated each time cobblerd restarts and is used to agree o...

9.8CVSS7.7AI score0.04003EPSS
SaveExploits6References7
Rows per page
Query Builder