Cobbler vulnerable to code injection via unsafe YAML loading
Date: 2022-05
Affected: pip/cobbler
Attack vector: deserialization
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2008-2025
CVE-2011-0462
CVE-2011-4953
CWE: CWE-20
CWE-79
CWE-94

The `set_mgmt_parameters` function in item.py in cobbler before 2.2.2 allows context-dependent attackers to execute arbitrary code via vectors related to the use of the `yaml.load` function instead of the `yaml.safe_load function`, as demonstrated using Puppet.


Mitigations:

Architectural layers (MAESTRO):