CVE-2021-40325

Cobbler before 3.3.0 allows authorization bypass for modification of settings...

CVE-2021-40325

CVE-2021-40325 affects Cobbler before 3.3.0, enabling an authorization bypass to modify settings. OpenSUSE/SUSE advisories state it also enabled remote code execution via the XMLRPC API with root read/write. A patch releasing Cobbler 3.3.0 fixes this issue; no exploitation status is provided in t...