PT-2018-9393 · Cobbler+2 · Cobbler+2

Michael Overmeyer · Published 2018-08-20 · Updated 2024-06-15 · CVE-2018-1000226

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cobbler versions 2.0.0 through 2.6.11+

Description The issue concerns an Incorrect Access Control vulnerability in the XMLRPC API, specifically at the /cobbler api endpoint. This can lead to privilege escalation, data manipulation or exfiltration, and LDAP credential harvesting. The vulnerability is exploitable via network connectivity and is a result of improper validation of security tokens in API endpoints.

Recommendations For Cobbler versions 2.0.0 through 2.6.11+, consider restricting access to the /cobbler api endpoint until a patch is available. As a temporary workaround, review and strengthen the validation of security tokens in API endpoints to minimize the risk of exploitation.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-1000226

GHSA-F88Q-22G8-FRCG

OPENSUSE-SU-2018_2590-1

OPENSUSE-SU-2021:0046-1

OPENSUSE-SU-2021:0058-1

OPENSUSE-SU-2021_0046-1

OPENSUSE-SU-2024:10690-1

SUSE-RU-2018:2639-1

SUSE-SU-2018:2551-1

SUSE-SU-2018:2561-1

SUSE-SU-2018:2608-1

USN-6475-1

Affected Products

Cobbler

Suse

Ubuntu

References · 108

• https://github.com/cobbler/cobbler/issues/1916 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f88q-22g8-frcg · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40323 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1000226 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2608-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10690-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2561-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000226 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2551-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0860 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:0058-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-1000225 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40324 · Vendor Advisory