CVE-2016-9605

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation...

CVE-2016-9605

CVE-2016-9605 affects cobbler version 2.6.11-1, where an invalid parameter validation vulnerability in Cobbler-Web allows arbitrary file reading when a vulnerable URL is accessed on a default install. The issue is described across multiple connected advisories (SUSE/OpenSUSE OSV entries, SUSE CVE...

SUSE-SU-2017:1699-1 Security update for cobbler

This update for cobbler fixes the following issues: - CVE-2016-9605: A directory traversal problem in the fix script endpoint was fixed that could be used to leak file content. bsc1030582...