Improper input validation in Cobbler_project Cobbler
CVE-2011-4953
The set_mgmt_parameters function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the yaml.load function instead of the yaml.safe_load function, as demonstrat…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.022 (80.3th percentile) — read the EPSS interpretation.
Affected products
- Cobbler_project Cobbler
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_CONFIRM)