CVE-2009-5021 Hardcoded credentials in n/a

What is CVE-2009-5021?

CVE-2009-5021 is a high-severity vulnerability in n/a, published on 9 Dec 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.

Weakness: CWE-255

Which versions are affected by CVE-2009-5021?

It affects 1 product.

Products include Michael Dehaan Cobbler.

How do I fix CVE-2009-5021?

No fix has been published for CVE-2009-5021 yet. Limit exposure of the affected software until one is available.

Is CVE-2009-5021 being exploited?

There is no known exploitation of CVE-2009-5021 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2008-6954 Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability Critical 9.0
• CVE-2010-2235 Cobbler is vulnerable to code injection High 8.5
• CVE-2012-2395 Cobbler subject to Command Injection High 7.5
• CVE-2010-4512 Misconfiguration in n/a High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8r97-qcvc-9gcw.