Approved changes feed: RSS · Atom

cpe:2.3:a:michael_dehaan:cobbler:2.0.3.1-2:*:*:*:*:*:*:*

part: a version: 2.0.3.1-2 update: *

VendorMichael Dehaan (b7f71db4-4754-5a80-b60b-4c5b70e0f973)
ProductCobbler (869a44ea-1b57-5ec3-9874-313c460e1a40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/cobbler/cobbler purl2cpe 2026-06-01 10:14:51.326743
pkg:gitlab/redhat/cobbler purl2cpe 2026-06-01 10:14:51.326745
pkg:pypi/cobbler purl2cpe 2026-06-01 10:14:51.326746
pkg:rpm/fedora/cobbler purl2cpe 2026-06-01 10:14:51.326748
pkg:rpm/opensuse/cobbler purl2cpe 2026-06-01 10:14:51.326749
pkg:sourceforge/cobbler.mirror purl2cpe 2026-06-01 10:14:51.326750

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2235 vulnerable 2026-06-08 04:54:12.392096 Details available
template_api.py in Cobbler before 2.0.7, as used in Red Hat Network Satellite Server and other products, does not disable the ability of the Cheetah template engine to execute Python statements contained in templates, which allows remote authenticated administrators to execute arbitrary code via a crafted kickstart template file, a different vulnerability than CVE-2008-6954.
Published: 2010-12-09T19:00:00.000Z
Updated: 2024-08-07T02:25:07.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.