Approved changes feed: RSS · Atom
cpe:2.3:a:the_cobbler_project:cobbler:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | The Cobbler Project (cba3b355-eb49-5659-9194-6addb92c1dff) |
|---|---|
| Product | Cobbler (9eb9b461-7d93-5673-8d7e-6d8f8d9516b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-10931 |
vulnerable | 2026-06-08 05:10:37.396885 |
Details available
CRITICAL (9.8)
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.
Published: 2018-08-09T20:00:00.000Z
Updated: 2024-08-05T07:54:35.798Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9605 |
vulnerable | 2026-06-08 05:08:24.134923 |
Details available
MEDIUM (6.1)
A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.
Published: 2018-08-22T21:00:00.000Z
Updated: 2024-08-06T02:59:02.710Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.