Sploitus

CVE-2012-2395

No indexed exploits for CVE-2012-2395 yet

Incomplete blacklist vulnerability in action_power.py in Cobbler 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) username or (2) password fields to the power_system method in the xmlrpc API.

Affected products
Cobbler, Suse
Michael Dehaan Cobbler
= 2.2.0
Fix
Available
CVSS 2.0
7.5 HIGH
EPSS
5.6% (92th percentile)
NVD status
Modified
Published
2012-06-16
CVE-2012-2395 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2012-2395 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2012-2395 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.