CVE-2009-5021: Michael Dehaan Cobbler

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Cobbler before 1.6.1 does not properly determine whether an installation has the default password, which makes it easier for attackers to obtain access by using this password.

Affected products

• Michael Dehaan Cobbler: up to and including 1.4.3-4; version 0.1.1.7 only; version 0.2.1 only; version 0.2.2 only; version 0.2.3 only; version 0.2.5 only; …

Published 2010-12-09. Last modified 2026-06-16.