7.5
CVSSv2

CVE-2018-10931

Published: 09/08/2018 Updated: 12/02/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cobbler project cobbler

redhat satellite 5.7

redhat satellite 5.6

redhat satellite 5.8

Vendor Advisories

Synopsis Critical: cobbler security update Type/Severity Security Advisory: Critical Topic An update for cobbler is now available for Red Hat Satellite 56, Red Hat Satellite 57, and Red Hat Satellite 58Red Hat Product Security has rated this update as having a security impact of Critical A Common Vulne ...
An API-exposure flaw was found in cobbler, where it exported CobblerXMLRPCInterface private functions over XMLRPC A remote, unauthenticated attacker could use this flaw to gain important privileges within cobbler, as well as upload files to an arbitrary location in the daemon context ...