PT-2010-1822 · Cobbler · Cobbler

Publicado 2010-12-09 · Atualizado 2017-08-17 · CVE-2009-5021

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cobbler versions prior to 1.6.1

Description The issue makes it easier for attackers to obtain access by using the default password, as the software does not properly determine whether an installation has this password.

Recommendations For versions prior to 1.6.1, update to version 1.6.1 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-5021

Produtos afetados

Cobbler

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2009-5021 · Nota de Segurança
• http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64734 · Nota