PT-2012-4008
CVE-2012-2395
·
تاريخ النشر
2012-05-29
·
تاريخ التحديث
2026-07-06
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Cobbler versions 2.2.0 through 2.5.x
Cobbler versions prior to 2.6.0
Description
The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the
username or password fields to the power system method in the xmlrpc API.Recommendations
For Cobbler versions 2.2.0 through 2.5.x, update to version 2.6.0 or later.
For Cobbler versions prior to 2.6.0, update to version 2.6.0 or later.
As a temporary workaround, consider restricting access to the power system method in the xmlrpc API to minimize the risk of exploitation.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾