Improper authorization in Cobbler - CVE-2022-0860

Vulnerability identifier: #VU86855

CSH Severity: Medium

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-0860

CWE-ID: CWE-285

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote user to bypass authorization process.

The vulnerability exists due to incorrect processing of expired accounts when using PAM. A remote user with an expired account can still access the application.

Cobbler
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Desktop 15
SUSE Manager Server Module
SUSE Manager Proxy
SUSE Manager Proxy Module
SUSE Manager Retail Branch Server
SUSE Manager Server
Fedora
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Development Tools Module
openSUSE Leap
saltboot-formula
inter-server-sync
inter-server-sync-debuginfo
prometheus-formula
grafana-formula
salt-netapi-client
subscription-matcher
virtual-host-gatherer-Kubernetes
virtual-host-gatherer
virtual-host-gatherer-libcloud
virtual-host-gatherer-Nutanix
virtual-host-gatherer-VMware
smdba
cobbler
jsr-305-javadoc
jsr-305
susemanager-tftpsync
supportutils-plugin-susemanager
python3-rhnlib
mgr-libmod
mgr-osa-dispatcher
python3-mgr-osa-dispatcher
mgr-osad
python3-mgr-osa-common
python3-mgr-osad
python3-uyuni-common-libs
spacewalk-search
mgr-daemon
spacewalk-proxy-installer
spacewalk-admin
spacewalk-proxy-package-manager
spacewalk-proxy-salt
spacewalk-proxy-common
spacewalk-proxy-broker
spacewalk-proxy-redirect
spacewalk-proxy-management
spacewalk-certs-tools
python3-spacewalk-certs-tools
spacecmd
python3-spacewalk-client-tools
python3-spacewalk-client-setup
python3-spacewalk-check
spacewalk-client-tools
spacewalk-client-setup
spacewalk-check
spacewalk-backend
spacewalk-backend-sql
spacewalk-backend-config-files-common
spacewalk-backend-xml-export-libs
spacewalk-backend-sql-postgresql
spacewalk-backend-xmlrpc
spacewalk-backend-config-files
spacewalk-backend-package-push-server
spacewalk-backend-server
spacewalk-backend-config-files-tool
spacewalk-backend-iss-export
spacewalk-backend-tools
spacewalk-backend-app
spacewalk-backend-iss
spacewalk-backend-applet
susemanager-schema
susemanager-sls
uyuni-config-modules
spacewalk-base
spacewalk-base-minimal-config
spacewalk-html
spacewalk-base-minimal
susemanager-tools
susemanager
spacewalk-java-postgresql
spacewalk-java
spacewalk-taskomatic
spacewalk-java-config
spacewalk-java-lib
susemanager-docs_en-pdf
susemanager-docs_en
susemanager-doc-indexes
release-notes-susemanager-proxy
release-notes-susemanager
woodstox
drools
susemanager-build-keys-web
susemanager-build-keys
guava
py27-compat-salt

Install updates from vendor's website.

Cobbler - update to 3.3.2
saltboot-formula - update to 0.1.1676908681.e90e0b1-150300.3.15.1
inter-server-sync - update to 0.2.7-150300.8.28.2
inter-server-sync-debuginfo - update to 0.2.7-150300.8.28.2
prometheus-formula - update to 0.7.0-150300.3.17.2
grafana-formula - update to 0.8.1-150300.3.9.2
salt-netapi-client - update to 0.21.0-150300.3.12.4
subscription-matcher - update to 0.29-150300.6.15.5
virtual-host-gatherer-Kubernetes - addressed in versions 1.0.24-150300.3.9.2, 1.0.25-150300.3.12.5
virtual-host-gatherer - addressed in versions 1.0.24-150300.3.9.2, 1.0.25-150300.3.12.5
virtual-host-gatherer-libcloud - addressed in versions 1.0.24-150300.3.9.2, 1.0.25-150300.3.12.5
virtual-host-gatherer-Nutanix - addressed in versions 1.0.24-150300.3.9.2, 1.0.25-150300.3.12.5
virtual-host-gatherer-VMware - addressed in versions 1.0.24-150300.3.9.2, 1.0.25-150300.3.12.5
smdba - update to 1.7.11-0.150300.3.12.2
cobbler - addressed in versions 2.8.5-6.el7, 3.2.2-9.fc35, 3.2.2-11.fc34, 3.3.2-1.fc36, 3-820220323131206.9edba152
jsr-305-javadoc - update to 3.0.2-150200.3.7.5
jsr-305 - update to 3.0.2-150200.3.7.5
cobbler - addressed in versions 3.1.2-150300.5.19.1, 3.1.2-150300.5.22.5
susemanager-tftpsync - update to 4.2.4-150300.3.6.6
supportutils-plugin-susemanager - addressed in versions 4.2.5-150300.3.9.2, 4.2.6-150300.3.12.5
python3-rhnlib - update to 4.2.7-150300.4.12.2
mgr-libmod - update to 4.2.8-150300.3.9.6
mgr-osa-dispatcher - update to 4.2.9-150300.2.12.2
python3-mgr-osa-dispatcher - update to 4.2.9-150300.2.12.2
mgr-osad - update to 4.2.9-150300.2.12.2
python3-mgr-osa-common - update to 4.2.9-150300.2.12.2
python3-mgr-osad - update to 4.2.9-150300.2.12.2
python3-uyuni-common-libs - addressed in versions 4.2.9-150300.3.14.1, 4.2.10-150300.3.17.6
spacewalk-search - addressed in versions 4.2.9-150300.3.15.2, 4.2.10-150300.3.18.6
mgr-daemon - update to 4.2.11-150300.2.12.5
spacewalk-proxy-installer - update to 4.2.11-150300.3.14.2
spacewalk-admin - update to 4.2.13-150300.3.18.1
spacewalk-proxy-package-manager - addressed in versions 4.2.13-150300.3.24.2, 4.2.14-150300.3.27.6
spacewalk-proxy-salt - addressed in versions 4.2.13-150300.3.24.2, 4.2.14-150300.3.27.6
spacewalk-proxy-common - addressed in versions 4.2.13-150300.3.24.2, 4.2.14-150300.3.27.6
spacewalk-proxy-broker - addressed in versions 4.2.13-150300.3.24.2, 4.2.14-150300.3.27.6
spacewalk-proxy-redirect - addressed in versions 4.2.13-150300.3.24.2, 4.2.14-150300.3.27.6
spacewalk-proxy-management - addressed in versions 4.2.13-150300.3.24.2, 4.2.14-150300.3.27.6
spacewalk-certs-tools - update to 4.2.19-150300.3.27.4
python3-spacewalk-certs-tools - update to 4.2.19-150300.3.27.4
spacecmd - addressed in versions 4.2.21-150300.4.33.2, 4.2.22-150300.4.36.7
python3-spacewalk-client-tools - addressed in versions 4.2.22-150300.4.30.2, 4.2.23-150300.4.33.7
python3-spacewalk-client-setup - addressed in versions 4.2.22-150300.4.30.2, 4.2.23-150300.4.33.7
python3-spacewalk-check - addressed in versions 4.2.22-150300.4.30.2, 4.2.23-150300.4.33.7
spacewalk-client-tools - addressed in versions 4.2.22-150300.4.30.2, 4.2.23-150300.4.33.7
spacewalk-client-setup - addressed in versions 4.2.22-150300.4.30.2, 4.2.23-150300.4.33.7
spacewalk-check - addressed in versions 4.2.22-150300.4.30.2, 4.2.23-150300.4.33.7
spacewalk-backend - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-sql - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-config-files-common - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-xml-export-libs - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-sql-postgresql - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-xmlrpc - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-config-files - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-package-push-server - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-server - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-config-files-tool - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-iss-export - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-tools - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-app - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-iss - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
spacewalk-backend-applet - addressed in versions 4.2.26-150300.4.35.6, 4.2.27-150300.4.38.7
susemanager-schema - update to 4.2.27-150300.3.35.1
susemanager-sls - addressed in versions 4.2.31-150300.3.43.1, 4.2.32-150300.3.46.5
uyuni-config-modules - addressed in versions 4.2.31-150300.3.43.1, 4.2.32-150300.3.46.5
spacewalk-base - addressed in versions 4.2.32-150300.3.36.4, 4.2.34-150300.3.41.5
spacewalk-base-minimal-config - addressed in versions 4.2.32-150300.3.36.4, 4.2.34-150300.3.41.5
spacewalk-html - addressed in versions 4.2.32-150300.3.36.4, 4.2.34-150300.3.41.5
spacewalk-base-minimal - addressed in versions 4.2.32-150300.3.36.4, 4.2.34-150300.3.41.5
susemanager-tools - update to 4.2.40-150300.3.49.1
susemanager - update to 4.2.40-150300.3.49.1
spacewalk-java-postgresql - addressed in versions 4.2.47-150300.3.58.1, 4.2.49-150300.3.63.3
spacewalk-java - addressed in versions 4.2.47-150300.3.58.1, 4.2.49-150300.3.63.3
spacewalk-taskomatic - addressed in versions 4.2.47-150300.3.58.1, 4.2.49-150300.3.63.3
spacewalk-java-config - addressed in versions 4.2.47-150300.3.58.1, 4.2.49-150300.3.63.3
spacewalk-java-lib - addressed in versions 4.2.47-150300.3.58.1, 4.2.49-150300.3.63.3
susemanager-docs_en-pdf - addressed in versions 4.2-150300.12.39.2, 4.2-150300.12.42.5
susemanager-docs_en - addressed in versions 4.2-150300.12.39.2, 4.2-150300.12.42.5
susemanager-doc-indexes - addressed in versions 4.2-150300.12.39.4, 4.2-150300.12.42.6
release-notes-susemanager-proxy - update to 4.3.2-150400.3.9.3
release-notes-susemanager - update to 4.3.2-150400.3.15.1
woodstox - update to 4.4.2-150300.3.6.2
drools - update to 7.17.0-150300.4.9.2
susemanager-build-keys-web - addressed in versions 15.3.6-150300.3.6.2, 15.3.6-150300.3.9.5
susemanager-build-keys - addressed in versions 15.3.6-150300.3.6.2, 15.3.6-150300.3.9.5
guava - update to 30.1.1-150300.4.3.4
py27-compat-salt - update to 3000.3-150300.7.7.29.2

• https://huntr.dev/bounties/c458b868-63df-414e-af10-47e3745caa1d
• https://github.com/cobbler/cobbler/commit/9044aa990a94752fa5bd5a24051adde099280bfa
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DYWYHWVVRUSPCV5SWBOSAMQJQLTSBTKY/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IYSHMF6MEIITFAG7EJ3IQKVUN7MDV2XM/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D4KCNZYBQC2FM5SEEDRQZO4LRZ4ZECMG/

• Improper authorization in cobbler
• SUSE update for SUSE Manager 4.2.11
• SUSE update for Maintenance update for SUSE Manager 4.2: Server, Proxy and Retail Branch Server
• SUSE update for release-notes-susemanager, release-notes-susemanager-proxy
• Fedora 35 update for cobbler
• Fedora 36 update for cobbler
• Fedora 34 update for cobbler
• Fedora Epel 8 Modular update for cobbler
• Fedora EPEL 7 update for cobbler