CVE-2017-1000469

CRITICAL

cobbler < 2.8.2 - OS Command Injection via Add Repo Component

Title source: llm
STIX 2.1

Description

Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user.

References (1)

Core 1
Core References
Exploit, Mitigation, Third Party Advisory x_refsource_confirm
https://github.com/cobbler/cobbler/issues/1845

Scores

CVSS v3 9.8
EPSS 0.0556
EPSS Percentile 91.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-20
Status published
Products (2)
cobbler_project/cobbler < 2.8.2
pypi/cobbler 0 - 3.0.0PyPI
Published Jan 03, 2018
Tracked Since Feb 18, 2026