What is GHSA-4vc9-4xpq-77vm?

GHSA-4vc9-4xpq-77vm is a security advisory published by GitHub Security Advisories with Medium severity. Cobbler Arbitrary File Read

Which CVE IDs does GHSA-4vc9-4xpq-77vm cover?

GHSA-4vc9-4xpq-77vm covers the following CVE IDs: CVE-2016-9605. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4vc9-4xpq-77vm?

GHSA-4vc9-4xpq-77vm has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-4vc9-4xpq-77vm?

GHSA-4vc9-4xpq-77vm affects 1 product, including: pip/cobbler:\u003c= 2.6.11-1.

GHSA-4vc9-4xpq-77vmMediumCVSS 6.1

Cobbler Arbitrary File Read

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

November 2, 2023

🔗 CVE IDs covered (1)

CVE-2016-9605 →

📋 Description

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.

🎯 Affected products1

pip/cobbler:<= 2.6.11-1

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2016-9605
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-9605
https://github.com/advisories/GHSA-4vc9-4xpq-77vm