Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-XC7W-JVHX-P6Q9
HistoryMay 14, 2022 - 2:52 a.m.

Cobbler Path Traversal vulnerability

2022-05-1402:52:42
CWE-22
GitHub Advisory Database
github.com
12
path traversal
cobbler 2.4.x
cobbler 2.6.x
remote authenticated users
arbitrary files
kickstart field
profile
web interface

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.03

Percentile

90.9%

JSON

Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.

Affected configurations

Vulners
Node
cobblercobblerRange2.4.0–2.4.7
OR
cobblercobblerRange2.6.0–2.6.4
VendorProductVersionCPE
cobblercobbler*cpe:2.3:a:cobbler:cobbler:*:*:*:*:*:*:*:*

Related

openvas 3
securityvulns 3
osv 3
ubuntucve 1
prion 1
packetstorm 1
nvd 1
cvelist 1
nessus 3
gitlab 1
cve 1
fedora 2
exploitdb 1
ubuntu 1
openvas
openvas
Fedora Update for cobbler FEDORA-2014-8545
2014-07-28 00:00:00
Fedora Update for cobbler FEDORA-2014-8561
2014-07-28 00:00:00
Ubuntu: Security Advisory (USN-6475-1)
2023-11-14 00:00:00
securityvulns
securityvulns
FD - Cobbler Arbitrary File Read CVE-2014-3225
2014-05-15 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-10 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2014-05-15 00:00:00
osv
osv
Cobbler Path Traversal vulnerability
2022-05-14 02:52:42
cobbler-2.6.6-4.2 on GA media
2024-06-15 00:00:00
cobbler vulnerabilities
2023-11-13 15:04:17
ubuntucve
ubuntucve
CVE-2014-3225
2014-05-14 00:00:00
prion
prion
Path traversal
2014-05-14 00:55:00
packetstorm
packetstorm
Cobbler 2.6.0 Arbitrary File Read
2014-05-13 00:00:00
nvd
nvd
CVE-2014-3225
2014-05-14 00:55:11
cvelist
cvelist
CVE-2014-3225
2014-05-14 00:00:00
nessus
nessus
Fedora 20 : cobbler-2.6.3-1.fc20 (2014-8561)
2014-07-28 00:00:00
Fedora 19 : cobbler-2.6.3-1.fc19 (2014-8545)
2014-07-28 00:00:00
Ubuntu 16.04 ESM : Cobbler vulnerabilities (USN-6475-1)
2023-11-13 00:00:00
gitlab
gitlab
Local File inclusion
2014-05-13 00:00:00
cve
cve
CVE-2014-3225
2014-05-14 00:55:11
fedora
fedora
[SECURITY] Fedora 20 Update: cobbler-2.6.3-1.fc20
2014-07-28 03:25:38
[SECURITY] Fedora 19 Update: cobbler-2.6.3-1.fc19
2014-07-28 03:24:56
exploitdb
exploitdb
Cobbler 2.4.x < 2.6.x - Local File Inclusion
2014-05-08 00:00:00
ubuntu
ubuntu
Cobbler vulnerabilities
2023-11-13 00:00:00

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.8

Confidence

Low

EPSS

0.03

Percentile

90.9%

JSON
Related for GHSA-XC7W-JVHX-P6Q9
openvas3securityvulns3osv3ubuntucve1prion1packetstorm1nvd1cvelist1nessus3gitlab1cve1fedora2exploitdb1ubuntu1