Lucene search
PRIOn knowledge basePRION:CVE-2018-1000226HistoryAug 20, 2018 - 8:29 p.m.
Design/Logic Flaw
2018-08-2020:29:00
PRIOn knowledge base
www.prio-n.com
7
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation or exfiltration, LDAP credential harvesting. This attack appear to be exploitable via “network connectivity”. Taking advantage of improper validation of security tokens in API endpoints. Please note this is a different issue than CVE-2018-10931.
Related
fedora
fedora
[SECURITY] Fedora 29 Update: cobbler-2.8.5-0.1.fc29
2019-09-11 21:18:50
[SECURITY] Fedora 29 Update: cobbler-2.8.4-5.fc29
2018-12-05 02:36:46
[SECURITY] Fedora 28 Update: cobbler-2.8.4-5.fc28
2018-12-05 01:58:03
nvd
nvd
CVE-2018-1000226
2018-08-20 20:29:01
CVE-2018-10931
2018-08-09 20:29:00
osv
osv
Cobbler Improper Validation of Security Tokens
2022-05-13 01:48:35
Cobbler has Exposed Dangerous Method or Function
2022-05-13 01:54:14
CVE-2018-10931
2018-08-09 20:29:00
cve
cve
CVE-2018-1000226
2018-08-20 20:29:01
CVE-2018-10931
2018-08-09 20:29:00
openvas
openvas
Fedora Update for cobbler FEDORA-2018-1d2a79fe1c
2018-12-05 00:00:00
Fedora Update for cobbler FEDORA-2019-cd24f60a94
2019-09-13 00:00:00
Fedora Update for cobbler FEDORA-2018-22c609e92a
2019-05-07 00:00:00
nuclei
nuclei
Cobbler - Authentication Bypass
2022-02-14 17:20:32
ubuntucve
ubuntucve
CVE-2018-1000226
2018-08-20 00:00:00
CVE-2018-10931
2018-08-09 00:00:00
nessus
nessus
Fedora 29 : cobbler (2018-22c609e92a)
2019-01-03 00:00:00
Fedora 28 : cobbler (2018-1d2a79fe1c)
2019-01-03 00:00:00
openSUSE Security Update : cobbler (openSUSE-2018-952)
2018-09-04 00:00:00
github
github
Cobbler Improper Validation of Security Tokens
2022-05-13 01:48:35
Cobbler has Exposed Dangerous Method or Function
2022-05-13 01:54:14
cvelist
cvelist
CVE-2018-1000226
2018-08-20 20:00:00
CVE-2018-10931
2018-08-09 20:00:00
gitlab
gitlab
Incorrect Permission Assignment for Critical Resource
2022-05-13 00:00:00
Exposed Dangerous Method or Function
2022-05-13 00:00:00
suse
suse
Security update for cobbler (important)
2018-09-03 15:07:54
Security update for cobbler (moderate)
2021-01-14 00:00:00
Security update for cobbler (moderate)
2021-01-11 00:00:00
redhatcve
redhatcve
CVE-2018-1000226
2018-08-22 07:49:00
CVE-2018-10931
2018-08-09 15:18:52
veracode
veracode
Arbitrary File Upload
2019-01-15 09:24:32
prion
prion
Design/Logic Flaw
2018-08-09 20:29:00
redhat
redhat
(RHSA-2018:2372) Critical: cobbler security update
2018-08-09 15:32:57
ubuntu
ubuntu
Cobbler vulnerabilities
2023-11-13 00:00:00