En resumen
- CVE-2014-3225 es una vulnerabilidad MEDIO (CVSS 4.0) que afecta a cobbler, cobbler (cobblerd).
- Probabilidad de explotación en los próximos 30 días (EPSS): 8.9%, mayor que el 95.2% de las vulnerabilidades.
- Solución: actualizar a 2.4.7, 2.6.4 o posterior.
| Package | Affected versions | Patched versions |
|---|
| cobbler PyPI | ≥ 2.4.0, < 2.4.7≥ 2.6.0, < 2.6.4
| 2.4.72.6.4
|
| cobbler | = 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.6.0
| No fix yet |
Description
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.
NVD description
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free