CVE-2021-45083

CVE-2021-45083 is a local privilege escalation vulnerability affecting Cobbler versions prior to 3.3.1. It allows non-privileged local users to read sensitive files in /etc/cobbler, specifically users.digest and settings.yaml. These files contain SHA2-512 password digests and hashed default passwords, which can be exploited to gain unauthorized access. The vulnerability has a CVSS v3.1 score of 7.1 (HIGH), indicating a low attack complexity and requiring local access, but leading to high confidentiality and integrity impacts. An attacker could easily guess weak passwords from the exposed digests. There is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.