CVE-2018-10931: Critical severity cobbler vulnerability
Cobbler CobblerXMLRPCInterface object exposes all its functions over XMLRPC. This allows an attacker to use internal the internal functions of the class, such as creating a token, or upload files.
Upstream issue:
https://github.com/cobbler/cobbler/issues/1916
Upstream patch:
https://github.com/cobbler/cobbler/pull/1921
References:
https://movermeyer.com/2018-08-02-privilege-escalation-exploits-in-cobblers-api/
Other sources
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler, upload files to arbitrary location in the context of the daemon.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-10931?
CVE-2018-10931 is a vulnerability found in cobbler 2.6.x that allows a remote attacker to gain high privileges and upload files to arbitrary locations in the context of the daemon.
How severe is CVE-2018-10931?
CVE-2018-10931 has a severity rating of 9.8, which is considered critical.
Which software versions are affected by CVE-2018-10931?
Cobbler versions between 2.6.0 and 2.6.11 are affected by CVE-2018-10931. Redhat Satellite versions 5.6, 5.7, and 5.8 are also affected.
How can an attacker exploit CVE-2018-10931?
An attacker can exploit CVE-2018-10931 by making use of the exposed functions from the CobblerXMLRPCInterface class over XMLRPC.
Are there any references for CVE-2018-10931?
Yes, you can find references for CVE-2018-10931 at the following links: [1] [2] [3].