{"answers":{"affected":"5 open source packages ship an affected version, including cobbler.","exploited":"It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-47533 exists.","fix":"Upgrade cobbler to a fixed version for your release line: 3.2.3 or 3.3.7.","what":"CVE-2024-47533 is a critical authentication bypass vulnerability in cobbler, published on 18 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2024-47533 and fix it if it is affected.\n\nWhat it is: CVE-2024-47533 is a critical authentication bypass vulnerability in cobbler, published on 18 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-47533 exists.\n\nAffected packages and fixed versions:\n- cobbler (PyPI): affected from 3.0.0; fixed in 3.2.3, 3.3.7\n- cobbler (PyPI): affected from 3.0.0; fixed in 3.2.3\n- cobbler (PyPI): affected from 3.0.0; fixed in 3.2.3\n- cobbler (PyPI): affected from 3.3.0; fixed in 3.3.7\n- cobbler (PyPI): affected from 3.3.0; fixed in 3.3.7\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2024-47533/ (Markdown: https://insights.sbomify.com/CVE-2024-47533/index.md)","id":"CVE-2024-47533","markdown":"https://insights.sbomify.com/CVE-2024-47533/index.md","name":"CVE-2024-47533","record":{"aliases":["GHSA-m26c-fcgh-cp6h","OESA-2025-1411","OESA-2025-1412","OESA-2025-1413","OESA-2025-1414","OESA-2025-1435","PYSEC-2026-316","openSUSE-SU-2024:0370-1","openSUSE-SU-2024:0382-1","openSUSE-SU-2024:14512-1"],"analysis":{"component_type":"server_software","fix_type":"upgrade","impacts":["privilege_escalation","data_modify"],"network_reachable":"yes","non_default_config":false,"product_category":"Linux installation server","requires_auth":"none","summary":"Attackers can bypass authentication on Cobbler XML-RPC using hardcoded credentials to gain full control and modify server configurations.","user_interaction":"not_required","vuln_class":"auth_bypass"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"GitHub_M","cpe":[],"cvss":{"score":9.8,"severity":"critical","source":"cna","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"cwes":[{"id":"CWE-287","name":"Improper Authentication"}],"description":"Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.","ecosystems":["PyPI","SUSE:Package Hub 15 SP5","SUSE:Package Hub 15 SP6","openSUSE:Leap 15.5","openSUSE:Leap 15.6","openSUSE:Tumbleweed"],"exploits":{"exploitdb":0,"first_seen":"2025-08-11","github_poc":5,"max_poc_stars":8,"metasploit":0,"nuclei":1,"refs":[{"date":"2025-08-12T13:52:55Z","kind":"github_poc","ref":"https://github.com/dollarboysushil/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC","stars":8,"title":"CVE-2024-47533 is a critical authentication bypass vulnerability in Cobbler (versions 3.0.0 to before 3.2.3 and 3.3.7) allowing unauthenticated remote code execution via the XMLRPC interface."},{"date":"2025-08-11T20:55:43Z","kind":"github_poc","ref":"https://github.com/baph00met/CVE-2024-47533","stars":3,"title":" CVE-2024-47533: Cobbler Authentication Bypass \u0026 Code Execution"},{"date":"2025-08-12T15:49:15Z","kind":"github_poc","ref":"https://github.com/00xCanelo/CVE-2024-47533-PoC","stars":1,"title":null},{"date":"2025-08-13T01:25:58Z","kind":"github_poc","ref":"https://github.com/zs1n/CVE-2024-47533","stars":1,"title":"PoC of CVE-2025-47533 Clobber RCE"},{"date":"2025-08-14T05:28:03Z","kind":"github_poc","ref":"https://github.com/okkotsu1/CVE-2024-47533","stars":1,"title":null},{"date":null,"kind":"nuclei","ref":"http/cves/2024/CVE-2024-47533.yaml","stars":null,"title":"Cobbler 'XML-RPC' - Authentication Bypass"}],"tier":"weaponised"},"has_fix":true,"headline":"Cobbler allows anyone to connect to cobbler XML-RPC server with a known password and make changes","id":"CVE-2024-47533","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"PyPI","product":null,"products":[],"type":"auth_bypass","year":"2024"},"n_packages":10,"n_references":3,"next":{"headline":"Incorrect delegation lookups can make go-tuf download the wrong artifact","id":"CVE-2024-47534"},"packages":[{"ecosystem":"PyPI","fixed":["3.2.3","3.3.7"],"introduced":["3.0.0","3.3.0"],"last_affected":[],"package":"cobbler","purl":"pkg:pypi/cobbler","source":"PYSEC-2026-316"},{"ecosystem":"PyPI","fixed":["3.2.3"],"introduced":["3.0.0"],"last_affected":[],"package":"cobbler","purl":null,"source":"GHSA-m26c-fcgh-cp6h"},{"ecosystem":"PyPI","fixed":["3.2.3"],"introduced":["3.0.0"],"last_affected":[],"package":"cobbler","purl":"pkg:pypi/cobbler","source":"GHSA-m26c-fcgh-cp6h"},{"ecosystem":"PyPI","fixed":["3.3.7"],"introduced":["3.3.0"],"last_affected":[],"package":"cobbler","purl":null,"source":"GHSA-m26c-fcgh-cp6h"},{"ecosystem":"PyPI","fixed":["3.3.7"],"introduced":["3.3.0"],"last_affected":[],"package":"cobbler","purl":"pkg:pypi/cobbler","source":"GHSA-m26c-fcgh-cp6h"},{"ecosystem":"SUSE:Package Hub 15 SP5","fixed":["3.3.7-bp155.2.3.2"],"introduced":["0"],"last_affected":[],"package":"cobbler","purl":"pkg:rpm/suse/cobbler\u0026distro=SUSE%20Package%20Hub%2015%20SP5","source":"openSUSE-SU-2024:0382-1"},{"ecosystem":"SUSE:Package Hub 15 SP6","fixed":["3.3.7-bp156.2.6.1"],"introduced":["0"],"last_affected":[],"package":"cobbler","purl":"pkg:rpm/suse/cobbler\u0026distro=SUSE%20Package%20Hub%2015%20SP6","source":"openSUSE-SU-2024:0370-1"},{"ecosystem":"openSUSE:Leap 15.5","fixed":["3.3.7-bp155.2.3.2"],"introduced":["0"],"last_affected":[],"package":"cobbler","purl":"pkg:rpm/opensuse/cobbler\u0026distro=openSUSE%20Leap%2015.5","source":"openSUSE-SU-2024:0382-1"},{"ecosystem":"openSUSE:Leap 15.6","fixed":["3.3.7-bp156.2.6.1"],"introduced":["0"],"last_affected":[],"package":"cobbler","purl":"pkg:rpm/opensuse/cobbler\u0026distro=openSUSE%20Leap%2015.6","source":"openSUSE-SU-2024:0370-1"},{"ecosystem":"openSUSE:Tumbleweed","fixed":["3.3.7-1.1"],"introduced":["0"],"last_affected":[],"package":"cobbler","purl":"pkg:rpm/opensuse/cobbler\u0026distro=openSUSE%20Tumbleweed","source":"openSUSE-SU-2024:14512-1"}],"prev":{"headline":"RestrictedPython information leakage via `AttributeError.obj` and the `string` module","id":"CVE-2024-47532"},"products":["cobbler"],"published":"2024-11-18","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"GitHub Advisory Database","prefix":"GHSA"},{"class":"attribution","licence":"CC BY 4.0","name":"PyPA Advisory Database","prefix":"PYSEC"},{"class":"attribution","licence":"CC BY 4.0","name":"SUSE","prefix":"openSUSE"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"},{"class":"attribution","licence":"MIT","name":"Nuclei templates"},{"class":"open","licence":"CC0","name":"PoC-in-GitHub"}],"ssvc":{"automatable":"yes","exploitation":"poc","technical_impact":"total"},"state":"PUBLISHED","updated":"2024-11-18","vendors":["cobbler"]},"summary":"Attackers can bypass authentication on Cobbler XML-RPC using hardcoded credentials to gain full control and modify server configurations.","url":"https://insights.sbomify.com/CVE-2024-47533/"}