Critical severity · published Oct 4, 2021
CVE-2021-40323
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection
9.8
CVSS
86.8%
EPSS
No
On KEV
Description
Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)86.8% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Cobbler · Cobbler Project
through 3.3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-40323
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-40323
Patch
https://github.com/cobbler/cobbler/commit/d8f60bbf14a838c8c8a1dba98086b223e35fe70a
Product
https://github.com/cobbler/cobbler/releases/tag/v3.3.0
More from Cobbler
9.8
CVE-2018-10931
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC
9.8
CVE-2017-1000469
Cobbler version up to 2.8.2 is vulnerable to a command injection vulnerability in the "add repo" component resulting in arbitrary code execution as root user
9.1
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2
7.8
CVE-2021-45082
An issue was discovered in Cobbler before 3.3.1
7.5
CVE-2021-40325
Cobbler before 3.3.0 allows authorization bypass for modification of settings