Improper certificate validation in cockpit
Priority LOW 34CWE-295Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 1 fixed, 2 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-295.
Summary
A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.
Why it matters now
EPSS 0.00704 53rd percentileScored 2026-11-07
Fix Partial Red Hat: 1 advisoryRed Hat: 1 fixed, 2 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | cockpit | cockpit versions prior to 260 | — | No fix listed | CNA |
- cockpit Vendor— Affected cockpit versions prior to 260 Fixed in — No fix listed CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cockpit-project:cockpit:*:*:*:*:*:*:*:* | before 260 | Vulnerable | Cockpit-project |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
- cpe:2.3:a:cockpit-project:cockpit:*:*:*:*:*:*:*:* Versions before 260 Vulnerable ·Cockpit-project
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
Remediation
Red Hat 1 advisory
- RHSA-2022:2008 Released 2022-05-10 · Red Hat rating Moderatecockpit security, bug fix, and enhancement update
- Red Hat Enterprise Linux BaseOS (v. 8) cockpit-264.1-1.el8, cockpit-bridge-264.1-1.el8, cockpit-doc-264.1-1.el8 +2
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat OpenShift Container Platform 3.11 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux BaseOS (v. 8) | Fixed | RHSA-2022:2008 |
Not affected: 2 products
- Red Hat Enterprise Linux 9
- Red Hat Virtualization 4
Timeline
- 2026-10-02 Threatist record created from CVE-2021-3698
- 2026-10-03 Alias added: GHSA-w9ph-5m4x-c49r
References
Sources
- CVE-2021-3698 · CVE Program
- CVE-2021-3698 · NVD
- FIRST EPSS
- GHSA-w9ph-5m4x-c49r · GitHub Advisory Database · CC BY 4.0
- CVE-2021-3698 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences