VulnerabilityModified
CVE-2022-0860
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
CRITICAL 9.1EPSS 2.26%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.
- CVSS 3.1
- 9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS
- 2.26% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-285, CWE-863
- Affected
- cobbler project/cobbler · fedoraproject/fedora
- Source
- security@huntr.dev
References
- https://github.com/cobbler/cobbler/commit/9044aa990a94752fa5bd5a24051adde099280bfaPatch, Third Party Advisory
- https://huntr.dev/bounties/c458b868-63df-414e-af10-47e3745caa1dExploit, Issue Tracking, Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4KCNZYBQC2FM5SEEDRQZO4LRZ4ZECMG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYWYHWVVRUSPCV5SWBOSAMQJQLTSBTKY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYSHMF6MEIITFAG7EJ3IQKVUN7MDV2XM/
- https://github.com/cobbler/cobbler/commit/9044aa990a94752fa5bd5a24051adde099280bfaPatch, Third Party Advisory
- https://huntr.dev/bounties/c458b868-63df-414e-af10-47e3745caa1dExploit, Issue Tracking, Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D4KCNZYBQC2FM5SEEDRQZO4LRZ4ZECMG/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DYWYHWVVRUSPCV5SWBOSAMQJQLTSBTKY/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IYSHMF6MEIITFAG7EJ3IQKVUN7MDV2XM/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.