CVE-2016-9605 Cobbler Arbitrary File Read
MediumCVSS 6.1
EPSS 0.81%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi cobbler(PyPI) | <= 2.6.11-1 | No fix listed |
| pypi cobbler(PyPI) | = 0.6.3-2 | No fix listed |
| cobbler project cobbler | = 2.6.11-1 | No fix listed |
| The cobbler Project cobbler | = 2.6.11-1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- github.com product
- github.com vendor-advisory
- pypi.org product