https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:07:52.619191+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-20579 cnvd-2022-20579 2026-10-04T19:07:52.630344+00:00 cnvd-2022-20579 https://cve.radiocsirt.org/vuln/euvd-2026-11295 EUVD-2026-11295 2026-10-04T19:07:52.630389+00:00 EUVD-2026-11295 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0860 fkie_cve-2022-0860 2026-10-04T19:07:52.630417+00:00

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.

 https://cve.radiocsirt.org/vuln/ghsa-mcg6-h362-cmq5 GHSA-mcg6-h362-cmq5 — Improper Authorization in cobbler 2026-10-04T19:07:52.630457+00:00

Affected: PyPI: cobbler

### Impact

If PAM is correctly configured and a user account is set to expired, the expired user-account is still able to successfully log into Cobbler in all places (Web UI, CLI & XMLRPC-API).

The same applies to user accounts with passwords set to be expired.

### Patches

There is a patch for the latest Cobbler `3.3.2` available, however a backport will be done for `3.2.x`.

### Workarounds

- Delete expired accounts which are able to access Cobbler via PAM. - Use `chage -l <username>` to lock the account. If the account has SSH-Keys attached then remove them completely.

### References

- Originally discovered by @ysf at https://www.huntr.dev/bounties/c458b868-63df-414e-af10-47e3745caa1d/

### How to test if my Cobbler instance is affected?

The following `pytest` test assumes that your PAM setup is correct. In case the added user is not able to login, this test does not make sense to be executed.

```python def test_pam_login_with_expired_user(): # Arrange # create pam testuser test_username = "expired_user" test_password = "password" test_api = CobblerAPI() subprocess_1 = subprocess.run( ["perl", "-e", "'print crypt(\"%s\", \"%s\")'" % (test_username, test_password)], stdout=subprocess.PIPE ) subprocess.run(["useradd", "-p", subprocess_1.stdout, test_username]) # change user to be expired subprocess.run(["chage", "-E0", test_username])

# Act result = pam.authenticate(test_api, test_username, test_passwo…

 https://cve.radiocsirt.org/vuln/gsd-2022-0860 gsd-2022-0860 2026-10-04T19:07:52.630508+00:00 gsd-2022-0860 https://cve.radiocsirt.org/vuln/pysec-2022-177 PYSEC-2022-177 2026-10-04T19:07:52.630522+00:00

Affected: PyPI: cobbler

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.

 https://cve.radiocsirt.org/vuln/suse-su-2022:3750-1 SUSE-SU-2022:3750-1 — Security update for SUSE Manager Server 4.3 2026-10-04T19:07:52.630558+00:00

Security update for SUSE Manager Server 4.3

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-0860 UBUNTU-CVE-2022-0860 2026-10-04T19:07:52.630584+00:00

Affected: Ubuntu:Pro:16.04:LTS: cobbler

Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1867 WID-SEC-W-2022-1867 — cobbler: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-04T19:07:52.630603+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in cobbler ausnutzen, um Sicherheitsvorkehrungen zu umgehen.