Em resumo
- CVE-2014-3225 é uma vulnerabilidade MÉDIO (CVSS 4.0) que afeta cobbler, cobbler (cobblerd).
- Chance de exploração nos próximos 30 dias (EPSS): 8.9%, maior que 95.2% das vulnerabilidades.
- Correção: atualize para 2.4.7, 2.6.4 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| cobbler PyPI | ≥ 2.4.0, < 2.4.7≥ 2.6.0, < 2.6.4
| 2.4.72.6.4
|
| cobbler | = 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.6.0
| No fix yet |
Description
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.
NVD description
Absolute path traversal vulnerability in the web interface in Cobbler 2.4.x through 2.6.x allows remote authenticated users to read arbitrary files via the Kickstart field in a profile.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free