Vulnerability Description
Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in Privilege escalation, data manipulation or exfiltration, LDAP credential harvesting. This attack appear to be exploitable via "network connectivity". Taking advantage of improper validation of security tokens in API endpoints. Please note this is a different issue than CVE-2018-10931.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cobblerd | Cobbler | >= 2.0.0 |
Related Weaknesses (CWE)
References
- https://github.com/cobbler/cobbler/issues/1916Issue TrackingVendor Advisory
- https://movermeyer.com/2018-08-02-privilege-escalation-exploits-in-cobblers-api/Third Party Advisory
- https://github.com/cobbler/cobbler/issues/1916Issue TrackingVendor Advisory
- https://movermeyer.com/2018-08-02-privilege-escalation-exploits-in-cobblers-api/Third Party Advisory
FAQ
What is CVE-2018-1000226?
CVE-2018-1000226 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vuln...
How severe is CVE-2018-1000226?
CVE-2018-1000226 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-1000226?
Check the references section above for vendor advisories and patch information. Affected products include: Cobblerd Cobbler.