Improper Authorization in GitHub repository cobbler/cobbler prior to 3.3.2. When configuring cobbler-web to authenticate via PAM. The authorization of a account validity is missing. Therefore expired accounts can still login. https://huntr.dev/bounties/c458b868-63df-414e-af10-47e3745caa1d https://github.com/cobbler/cobbler/commit/9044aa990a94752fa5bd5a24051adde099280bfa
Created cobbler tracking bugs for this issue: Affects: epel-all [bug 2066592] Affects: fedora-all [bug 2066593]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.