Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

GSA_kwCzR0hTQS1jcjNmLXIyNGotM2Nod80WIw

High CVSS: 8.7 EPSS: 0.00025% (0.05287 Percentile) EPSS:
Permalink JSON

Cobbler before 3.3.0 allows authorization bypass for modification of settings.

Affected Packages Affected Versions Fixed Versions
pypi:cobbler < 3.3.0 3.3.0
0 Dependent packages
11 Dependent repositories
244 Downloads last month

Affected Version Ranges

All affected versions

3.1.2, 3.2.1, 3.2.2, 3.2.3

All unaffected versions

3.3.0, 3.3.1, 3.3.2, 3.3.3, 3.3.4, 3.3.5, 3.3.6, 3.3.7

Cobbler before 3.3.0 allows authorization bypass for modification of settings.

References:

Identifiers

GHSA-cr3f-r24j-3chw

CVE-2021-40325

Risk

Severity

High

CVSS

CVSS Score: 8.7

CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

EPSS

EPSS Percentage: 0.00025

EPSS Percentile: 0.05287

Classification

General

Source

GitHub Advisory Database

Origin

Unspecified

Repository

https://github.com/cobbler/cobbler

Date and time

Published

almost 4 years ago

Updated

11 months ago

API

JSON