by Kastro
Paper/Archive/CVE-2022-0860

CVE-2022-0860

cobbler cobbler/cobbler — Improper Authorization in cobbler/cobbler

EPSS 2%CVSS 9.1
critical.is priorityof 100
44
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 83.0.830 × 2016.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.

Affected

ProductAffectedFixed inSource
cobbler/cobblerunspecified – < 3.3.23.3.2CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
@huntrdev (CNA)8.2CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

References

refhuntr.dev/bounties/c458b868-63df-414e-af10-47e3745caa1drefgithub.com/cobbler/cobbler/commit/9044aa990a94752fa5bd5a24051adde099280bfaadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYWYHWVVRUSPCV5SWBOSAMQJQLTSBTKYadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4KCNZYBQC2FM5SEEDRQZO4LRZ4ZECMGadvisorylists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYSHMF6MEIITFAG7EJ3IQKVUN7MDV2XM