Cobbler Arbitrary File Read Vulnerability

Cobbler is a network installation server suite that makes it possible to quickly set up a Linux network installation environment. An arbitrary file read vulnerability exists in Cobbler version 2.6.11-1. An attacker can exploit this vulnerability to read arbitrary files...

Input validation

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation...