PT-2022-12302 · Cobbler · Cobbler

Paolo Perego · Published 2022-02-20 · Updated 2025-05-16 · CVE-2021-45081

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cobbler versions prior to 3.3.2

Description An issue was discovered where routines in several files use the HTTP protocol instead of the more secure HTTPS.

Recommendations For Cobbler versions prior to 3.3.2, consider updating to a version that uses HTTPS instead of HTTP to enhance security. As a temporary workaround, consider restricting access to the affected routines until a patch is available.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2021-45081

OESA-2025-1467

OESA-2025-1468

OESA-2025-1469

OESA-2025-1527

Affected Products

Cobbler

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2021-45081 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-45081 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1467 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1468 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45081 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45081 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-40323 · Security Note
• http://openwall.com/lists/oss-security/2022/02/18/3 · Patch
• https://ubuntu.com/security/CVE-2021-45081 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1469 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-40324 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-45083 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1527 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45082 · Security Note
• https://github.com/cobbler/cobbler/releases · Note