Cobblerd Cobbler
5 CVEs affecting Cobblerd Cobbler. Latest disclosed: 2019-11-19. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1000226 | Critical | 9.8 | 2018-08-20 | Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable… |
CVE-2011-4952 | High | 8.8 | 2019-11-19 | cobbler: Web interface lacks CSRF protection when using Django framework |
CVE-2011-4954 | High | 7.8 | 2019-11-19 | cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE |
CVE-2018-1000225 | Medium | 6.1 | 2018-08-20 | Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable… |
CVE-2014-3225 | | 2014-05-14 | Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kic… |