References https://nvd.nist.gov/vuln/detail/CVE-2024-47533 https://github.com/cobbler/cobbler/security/advisories/GHSA-m26c-fcgh-cp6h https://ccb.belgium.be/advisories/warning-unauthorized-access-cobbler-xml-rpc-server-patch-immediately https://access.redhat.com/security/cve/cve-2024-47533 https://www.sentinelone.com/vulnerability-database/cve-2024-47533/ https://github.com/advisories/GHSA-m26c-fcgh-cp6h https://www.miggo.io/vulnerability-database/cve/CVE-2024-47533 https://www.ncsc.gov.ie/pdfs/2411220144_Critical_Vulnerability_in_Cobbler_Server.pdf
Related VulnerabilitiesPoCCVE-2018-1000226: Cobbler - Authentication BypassPoCCVE-2021-40323: Cobbler <3.3.0 - Remote Code ExecutionPoCCVE-2024-47533: Cobbler 'XML-RPC' - Authentication BypassPoCCNVD-2018-16876: Cobbler 任意文件读取漏洞PoCcobbler-default-login: Cobbler Default LoginPoCcobbler-exposed-directory: Exposed Cobbler DirectoriesPoCcobbler-webgui: Cobbler WebGUI DetectionCobbler 不正确的访问控制漏洞Cobbler cobbler_api 存在代码注入漏洞(CVE-2021-40323)