CVE-2021-45081 — Cleartext Transmission of Sensitive Info in Project Cobbler

CWE-319 — Cleartext Transmission of Sensitive InfoCWE-327 — Use of a Broken or Risky Cryptographic Algorithm5 documents5 sources
Severity
5.9MEDIUMNVD
EPSS
0.2%
top 55.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cobbler Project Cobbler
Timeline
PublishedFeb 20
Latest updateFeb 21

Description

An issue was discovered in Cobbler through 3.3.1. Routines in several files use the HTTP protocol instead of the more secure HTTPS.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

Patches

Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-332r-78jx-2j2m: An issue was discovered in Cobbler through 3↗2022-02-21
▶
CVEList
CVE-2021-45081: An issue was discovered in Cobbler through 3↗2022-02-20
▶
OSV
CVE-2021-45081: An issue was discovered in Cobbler through 3↗2022-02-20
▶

📋Vendor Advisories

1
Red Hat
cobbler: unsafe protocol usage↗2022-02-18
▶
CVE-2021-45081 — Cobbler Project Cobbler vulnerability | cvebase