cobbler: improper authentication (CVE-2024-47533) #shorts #breaking

CVE

CVE-2024-47533 involves a critical security flaw in Cobbler, a server application that's used for managing network installations for Linux systems. This vulnerability is due to improper authentication mechanisms present in Cobbler versions 3.0.0 up to but not including 3.2.3 and 3.3.7. The issue arises because the function `utils.get_shared_secret()` consistently returns a value of `-1`. This flaw permits an unauthorized user, who can access the network where Cobbler is running, to connect to the Cobbler XML-RPC interface using an empty username and `-1` as the password. As a result, they gain the ability to make unauthorized changes and gain full control of the server, compromising the server's security and integrity. This highlights the crucial importance of robust authentication processes in maintaining server security.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://github.com/cobbler/cobbler/security/advisories/GHSA-m26c-fcgh-cp6h
• https://github.com/cobbler/cobbler/commit/32c5cada013dc8daa7320a8eda9932c2814742b0
• https://github.com/cobbler/cobbler/commit/e19717623c10b29e7466ed4ab23515a94beb2dda