[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-0860":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":19,"cwes":20,"cpes":23,"technologies":29,"references":33,"score":47,"epss_score":48,"epss_percentile":49,"is_kev":50,"cisa_kev_date_added":51,"cisa_kev_due_date":51,"cisa_ssvc":52,"attack_mappings":58,"exploits":65},314103,"CVE-2022-0860","EUVD-2022-0039","Improper Authorization in cobbler\n\n### Impact\n\nIf PAM is correctly configured and a user account is set to expired, the expired user-account is still able to successfully log into Cobbler in all places (Web UI, CLI & XMLRPC-API).\n\nThe same applies to user accounts with passwords set to be expired.\n\n### Patches\n\nThere is a patch for the latest Cobbler `3.3.2` available, however a backport will be done for `3.2.x`.\n\n### Workarounds\n\n- Delete expired accounts which are able to access Cobbler via PAM.\n- Use `chage -l \u003Cusername>` to lock the account. If the account has SSH-Keys attached then remove them completely.\n\n### References\n\n- Originally discovered by @ysf at https:\u002F\u002Fwww.huntr.dev\u002Fbounties\u002Fc458b868-63df-414e-af10-47e3745caa1d\u002F\n\n### How to test if my Cobbler instance is affected?\n\nThe following `pytest` test assumes that your PAM setup is correct. In case the added user is not able to login, this test does not make sense to be executed.\n\n```python\ndef test_pam_login_with_expired_user():\n    # Arrange\n    # create pam testuser\n    test_username = \"expired_user\"\n    test_password = \"password\"\n    test_api = CobblerAPI()\n    subprocess_1 = subprocess.run(\n        [\"perl\", \"-e\", \"'print crypt(\\\"%s\\\", \\\"%s\\\")'\" % (test_username, test_password)],\n        stdout=subprocess.PIPE\n    )\n    subprocess.run([\"useradd\", \"-p\", subprocess_1.stdout, test_username])\n    # change user to be expired\n    subprocess.run([\"chage\", \"-E0\", test_username])\n\n    # Act\n    result = pam.authenticate(test_api, test_username, test_password)\n\n    # Assert - login should fail\n    assert not result\n```\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [the Cobbler repository](https:\u002F\u002Fgithub.com\u002Fcobbler\u002Fcobbler\u002Fissues\u002Fnew\u002Fchoose)\n* Ask in the [Gitter\u002FMatrix Chat](https:\u002F\u002Fgitter.im\u002Fcobbler\u002Fcommunity)\n* Email us at [cobbler.project@gmail.com](mailto:cobbler.project@gmail.com)\n","2022-03-11T20:52:00Z",{"cvss_v3.0":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":18,"privilegesRequired":18,"confidentialityImpact":15},"UNCHANGED","3.0",8.2,"NETWORK","HIGH","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N","LOW","NONE",true,[21,22],"CWE-285","CWE-863",[24,25,26,27,28],"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*","cpe:2.3:a:cobbler_project:cobbler:*:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*","cpe:2.3:a:cobbler:cobbler:*:*:*:*:*:*:*:*",[30,31,32],"Cobbler_Project Cobbler","Fedoraproject Fedora","Cobbler Cobbler",[34,35,36,37,38,39,40,41,42,43,44,45,46],"https:\u002F\u002Fgithub.com\u002Fcobbler\u002Fcobbler\u002Fcommit\u002F9044aa990a94752fa5bd5a24051adde099280bfa","https:\u002F\u002Fhuntr.dev\u002Fbounties\u002Fc458b868-63df-414e-af10-47e3745caa1d","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FD4KCNZYBQC2FM5SEEDRQZO4LRZ4ZECMG\u002F","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FDYWYHWVVRUSPCV5SWBOSAMQJQLTSBTKY\u002F","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FIYSHMF6MEIITFAG7EJ3IQKVUN7MDV2XM\u002F","https:\u002F\u002Fgithub.com\u002Fcobbler\u002Fcobbler\u002Fsecurity\u002Fadvisories\u002FGHSA-mcg6-h362-cmq5","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2022-0860","https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-mcg6-h362-cmq5","https:\u002F\u002Fgithub.com\u002Fcobbler\u002Fcobbler","https:\u002F\u002Fgithub.com\u002Fpypa\u002Fadvisory-database\u002Ftree\u002Fmain\u002Fvulns\u002Fcobbler\u002FPYSEC-2022-177.yaml","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FD4KCNZYBQC2FM5SEEDRQZO4LRZ4ZECMG","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FDYWYHWVVRUSPCV5SWBOSAMQJQLTSBTKY","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FIYSHMF6MEIITFAG7EJ3IQKVUN7MDV2XM",0.76,0.02256,0.82846,false,null,{"timestamp":51,"automatable":53,"tech_impact":54,"exploitation":55,"cisa_decision":56,"cisa_remediation_timeline":57},"no","partial","none",{},"FSU",[59],{"name":60,"source":61,"tactics":62,"technique_id":64},"Exploit Public-Facing Application","attack_vector",[63],"initial-access","T1190",[66],{"link":35}]