En bref
- CVE-2014-3225 est une vulnérabilité MOYENNE (CVSS 4.0) touchant cobbler, cobbler (cobblerd).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 8.9%, plus élevée que 95.2% des vulnérabilités.
- Correctif : mettre à jour vers 2.4.7, 2.6.4 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| cobbler PyPI | ≥ 2.4.0, < 2.4.7≥ 2.6.0, < 2.6.4
| 2.4.72.6.4
|
| cobbler | = 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.6.0
| No fix yet |
Description
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.
NVD description
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free