CVE-2016-9605 — Vulnetix

Try Vulnetix Request Demo

CVE-2016-9605 PUBLISHED CVSS 6.099999904632568 MEDIUM

A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation.

EPSS 0.30% · 53.6th percentile

Risk Scores

CVSS v3.0

6.099999904632568

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

0.30%

53.6th percentile

Affected Products

Vendor	Product	Versions
The cobbler Project	cobbler	2.6.11-1
PyPI	cobbler	0
cobbler_project	cobbler	2.6.11-1

Timeline

Aug 22, 2018 CVE Published
Feb 4, 2022 EPSS Score
Mar 28, 2022 EPSS Score
May 19, 2022 EPSS Score
Jul 10, 2022 EPSS Score
Sep 1, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Dec 14, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 28, 2023 EPSS Score
May 19, 2023 EPSS Score

References

Open in Interactive Console →