The Cobbler Project Cobbler vulnerabilities
2 vulnerabilities
Known vulnerabilities in The Cobbler Project Cobbler, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2016-9605the cobbler project · cobbler +4 morethe cobbler project cobblerA flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.CVSS6.1MediumEPSS0.81%PrioritiseCVE-2018-10931the cobbler project · cobbler +7 morethe cobbler project cobblerIt was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.CVSS9.8CriticalEPSS68.08%