Cobbler prior to 3.3.0 allows authorization bypass for modification of settings.
cobbler project cobbler