Search for packages
| purl | pkg:pypi/cobbler@3.2.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2014-3225
|
Local File inclusion A local file inclusion is possible by specifying full path to any desired file in the Kickstart … | There are no reported fixed by versions. |
|
PYSEC-2021-373
Aliases: CVE-2021-40323 GHSA-cpqf-3c3r-c9g2 |
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile … |
Vulnerable |
|
PYSEC-2021-374
Aliases: CVE-2021-40324 GHSA-4cfr-gjfx-fj3x |
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. |
Vulnerable |
|
PYSEC-2021-375
Aliases: CVE-2021-40325 GHSA-cr3f-r24j-3chw |
Cobbler before 3.3.0 allows authorization bypass for modification of settings. |
Vulnerable |
|
PYSEC-2022-177
Aliases: CVE-2022-0860 GHSA-mcg6-h362-cmq5 |
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. |
Vulnerable |
|
PYSEC-2021-375
Aliases: CVE-2021-40325 GHSA-cr3f-r24j-3chw |
Cobbler before 3.3.0 allows authorization bypass for modification of settings. |
Vulnerable |
|
PYSEC-2022-177
Aliases: CVE-2022-0860 GHSA-mcg6-h362-cmq5 |
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. |
Vulnerable |
|
PYSEC-2021-373
Aliases: CVE-2021-40323 GHSA-cpqf-3c3r-c9g2 |
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile … |
Vulnerable |
|
PYSEC-2022-37
Aliases: CVE-2021-45082 GHSA-6cm4-gm85-972c |
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to … |
Vulnerable |
|
PYSEC-2022-38
Aliases: CVE-2021-45083 GHSA-5946-mpw5-pqxx |
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some … |
Vulnerable |
|
PYSEC-2021-374
Aliases: CVE-2021-40324 GHSA-4cfr-gjfx-fj3x |
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data. |
Vulnerable |
|
PYSEC-2022-37
Aliases: CVE-2021-45082 GHSA-6cm4-gm85-972c |
An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to … |
Vulnerable |
|
PYSEC-2022-38
Aliases: CVE-2021-45083 GHSA-5946-mpw5-pqxx |
An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some … |
Vulnerable |
|
GHSA-m26c-fcgh-cp6h
Aliases: CVE-2024-47533 |
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes ### Summary utils.get_shared_secret() always returns … |
Vulnerable |
|
PYSEC-2026-316
Aliases: CVE-2024-47533 GHSA-m26c-fcgh-cp6h |
cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes ### Summary utils.get_shared_secret() always returns … |
Vulnerable Vulnerable |