CVE-2022-0860: Improper Authorization in cobbler
Summary
CVE-2022-0860: Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. Affects cobbler across 2 version ranges.
< 3.3.2
< 9044aa990a94752fa5bd5a24051adde099280bfa
Fixed in 9044aa990a94752fa5bd5a24051adde099280bfa. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Cobbler is an open-source installation server that automates the provisioning and configuration of operating systems. It is commonly used in large-scale deployment environments to manage and deploy Linux distributions. The vulnerability identified as CVE-2022-0860 affects versions of cobbler prior to 3.3.2.
Vulnerability Detail
The vulnerability in cobbler is related to improper authorization. It allows unauthorized users to perform actions that should only be accessible to privileged users. This can lead to unauthorized access, data leakage, and potential compromise of the cobbler server. The vulnerability was introduced in the initial release of cobbler and was fixed in version 3.3.2.
How To Fix
Latest published version: 3.3.10 as of 23 Oct 2026
pip install --upgrade "cobbler==3.3.10"Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
9044aa990a94752fa5bd5a24051adde099280bfa
This is the first release that contains the fix.
pip install --upgrade "cobbler==9044aa990a94752fa5bd5a24051adde099280bfa"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to apply the fix by upgrading to the patched version.
Conclusion
The vulnerability in cobbler (CVE-2022-0860) allows unauthorized users to perform privileged actions, potentially leading to unauthorized access and compromise of the cobbler server. It is crucial to upgrade to cobbler version 3.3.2 or later to mitigate this vulnerability. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for cobbler →
FAQ
Cobbler is an open-source installation server used for automating the provisioning and configuration of operating systems.
The vulnerability allows unauthorized users to perform actions that should only be accessible to privileged users, potentially leading to unauthorized access, data leakage, and compromise of the cobbler server.
To fix the vulnerability, it is recommended to upgrade to cobbler version 3.3.2 or later.
There is no known workaround for this vulnerability. It is essential to apply the fix by upgrading to the patched version.
You can find more information about this vulnerability in the official GitHub repository of cobbler.
Related vulnerabilities
Recent vulnerabilities recorded for cobbler.
