Cobbler vulnerable to code injection via unsafe YAML loading

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2011-4953 · ADVISORY
• cobbler/cobbler commit 1b4f9ec · WEB
• bugs.launchpad.net/ubuntu/oneiric/+source/cobbler/+bug/858883 · WEB
• bugzilla.novell.com/show_bug.cgi · WEB
• cobbler/cobbler · PACKAGE
• lists.opensuse.org/opensuse-security-announce/2012-04/msg00019.html · WEB
• pypi.org/project/cobbler · PACKAGE
• GitHub Advisory GHSA-hpj3-5p46-g87w · ADVISORY

cobbler のその他の脆弱性

• CVE-2024-47533緊急 9.8Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulner…
• CVE-2022-0860緊急 9.1Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
• CVE-2021-45083高 7.1An issue was discovered in Cobbler before 3.3.1. Files in /etc/cobbler are world readable. Two of those files contain some sensitive informa…
• CVE-2021-45082高 7.8An issue was discovered in Cobbler before 3.3.1. In the templar.py file, the function check_for_invalid_imports can allow Cheetah code to im…
• CVE-2021-40325高 7.5Cobbler before 3.3.0 allows authorization bypass for modification of settings.