Vulnerability Description
Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.
CVSS Score
7.5
HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Michael Dehaan | Cobbler | <= 1.4.3-4 |
Related Weaknesses (CWE)
References
- http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gzPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64734
- http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gzPatch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64734
FAQ
What is CVE-2009-5021?
CVE-2009-5021 is a vulnerability with a CVSS score of 7.5 (HIGH). Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.
How severe is CVE-2009-5021?
CVE-2009-5021 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-5021?
Check the references section above for vendor advisories and patch information. Affected products include: Michael Dehaan Cobbler.