CVE-2009-5021

critical

Description

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64734

http://people.fedoraproject.org/~shenson/cobbler/cobbler-2.0.8.tar.gz

Details

Source: Mitre, NVD

Published: 2010-12-09

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00296