high7.5
CVE-2009-5021
Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by usin…
Impact
Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Michael Dehaan | Cobbler | through 1.4.3-4 Versions 0.1.1.7, 0.2.1, 0.2.2, 0.2.3, 0.2.5 |