PT-2018-9392 · Cobbler+2 · Cobbler+2

Michael Overmeyer · Published 2018-08-20 · Updated 2024-06-15 · CVE-2018-1000225

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cobbler versions 2.0.0 through 2.6.11+

Description The issue concerns a Cross Site Scripting (XSS) vulnerability in cobbler-web, which can lead to Privilege escalation to admin. This can be exploited via network connectivity by sending an unauthenticated JavaScript payload to the Cobbler XMLRPC API at "/cobbler api".

Recommendations For Cobbler versions 2.0.0 through 2.6.11+, consider disabling the cobbler-web module until a patch is available to prevent exploitation of the XSS vulnerability. Restrict access to the Cobbler XMLRPC API at "/cobbler api" to minimize the risk of unauthenticated JavaScript payload attacks.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2018-1000225

GHSA-Q9G5-98PM-W6Q7

OPENSUSE-SU-2018_2590-1

OPENSUSE-SU-2021:0046-1

OPENSUSE-SU-2021:0058-1

OPENSUSE-SU-2021_0046-1

OPENSUSE-SU-2024:10690-1

SUSE-RU-2018:2639-1

SUSE-SU-2018:2551-1

SUSE-SU-2018:2561-1

SUSE-SU-2018:2608-1

USN-6475-1

Affected Products

Cobbler

Suse

Ubuntu

References · 108

• https://osv.dev/vulnerability/SUSE-SU-2018:2608-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6475-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000225 · Security Note
• https://ubuntu.com/security/CVE-2018-10931 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2551-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000225 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-1000225 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45082 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10690-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40324 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-1000469 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-1000225 · Security Note
• https://ubuntu.com/security/notices/USN-6475-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000226 · Vendor Advisory