WID-SEC-W-2023-2928

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Cobbler: Mehrere Schwachstellen

view advisory published 2018-08-29

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in SUSE Manager und cobbler ausnutzen, um seine Privilegien zu erhöhen oder Sicherheitsrestriktionen zu umgehen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2018-1000226UScritical9.8—
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect…
CVE-2018-1000225USmedium6.1—
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Sit…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan