CVE-2018-10931
First published: Wed Aug 08 2018(Updated: )
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cobbler Project Cobbler | >=2.6.0<=2.6.11 | |
| Redhat Satellite | =5.6 | |
| Redhat Satellite | =5.7 | |
| Redhat Satellite | =5.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2018:2372
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10931
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P5Q4ACIVZ5D4KSUDLGRTOKGGB4U42SD/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMWK5KCCZXOGOYNR2H6BWDSABTQ5NYJA/
- https://github.com/cobbler/cobbler/issues/1916
- https://github.com/cobbler/cobbler/pull/1921
- https://movermeyer.com/2018-08-02-privilege-escalation-exploits-in-cobblers-api/
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1474535&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=1474535&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1614431
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1614433
- https://bugzilla.redhat.com/show_bug.cgi?id=1613861
Frequently Asked Questions
What is CVE-2018-10931?
CVE-2018-10931 is a vulnerability found in cobbler 2.6.x that allows a remote attacker to gain high privileges and upload files to arbitrary locations in the context of the daemon.
How severe is CVE-2018-10931?
CVE-2018-10931 has a severity rating of 9.8, which is considered critical.
Which software versions are affected by CVE-2018-10931?
Cobbler versions between 2.6.0 and 2.6.11 are affected by CVE-2018-10931. Redhat Satellite versions 5.6, 5.7, and 5.8 are also affected.
How can an attacker exploit CVE-2018-10931?
An attacker can exploit CVE-2018-10931 by making use of the exposed functions from the CobblerXMLRPCInterface class over XMLRPC.
Are there any references for CVE-2018-10931?
Yes, you can find references for CVE-2018-10931 at the following links: [1] [2] [3].
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-10931
- vendor/cobbler project
- canonical/cobbler project cobbler
- version/cobbler project cobbler/2.6.0
- version/cobbler project cobbler/2.6.11
- vendor/redhat
- canonical/redhat satellite
- version/redhat satellite/5.6
- version/redhat satellite/5.7
- version/redhat satellite/5.8