It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2018-08-09T20:00:00
Updated: 2019-09-11T22:06:10
Reserved: 2018-05-09T00:00:00
Link: CVE-2018-10931
JSON object: View
NVD Information
Status : Modified
Published: 2018-08-09T20:29:00.347
Modified: 2023-02-12T23:31:48.910
Link: CVE-2018-10931
JSON object: View
Redhat Information
No data.
CWE