Cosign

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Cosign records in CISA KEV

No Cosign vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cosign 2 records LOW

Records

2 records in Cosign · all components

TI-2007-02150 CVE-2007-2232 · GHSA-w77h-x78h-77gv

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass…

LOW 38

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02472 Published 2007-04-25 No fix listed

TI-2007-02151 CVE-2007-2233 · GHSA-j44r-c574-p2hv

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to…

LOW 33

cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as an arbitrary user by using CR (\r) sequences in the service parameter to inject LOGIN and REGISTER co…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.0199 Published 2007-04-25 No fix listed

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0