PatchTheCVEcobblerd vulnerabilities
Recent CVEs affecting cobblerd products. 4 tracked.
cobblerd has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-11-19. Highest priority: CVE-2018-1000226 (score 63/100).
- CVE-2018-1000226 CRITICAL 9.8 DOWNGRADE Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+
- CVE-2018-1000225 MEDIUM 6.1 MITIGATE Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+
- CVE-2011-4954 HIGH 7.8 MITIGATE cobbler has local privilege escalation via the use of insecure location for PYTHON_EGG_CACHE
- CVE-2011-4952 HIGH 8.8 MITIGATE cobbler: Web interface lacks CSRF protection when using Django framework
FAQ
How do I fix cobblerd vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cobblerd being exploited right now?
None of the tracked cobblerd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cobblerd CVE should I patch first?
CVE-2018-1000226 currently ranks highest (63/100): Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ .