| Package | Affected versions | Patched versions |
|---|---|---|
| cobbler | ≥ 2.4.0, < 2.4.7≥ 2.6.0, < 2.6.4 | 2.4.72.6.4 |
| cobbler | = 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.6.0 |
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free