Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Cockpit-project Clear all filters
TI-2021-02633 CVE-2021-3698 · GHSA-w9ph-5m4x-c49r

Improper certificate validation in cockpit

Priority LOW 34

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00704 Published 2022-03-08 Partial fix CWE-295
TI-2021-02602 CVE-2021-3660 · GHSA-5m9v-2hhc-h2wj

Clickjacking in cockpit

Priority LOW 23

Cockpit (and its plugins) do not seem to protect itself against clickjacking.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01261 Published 2022-03-07 Partial fix CWE-1021
TI-2019-02816 CVE-2019-3804 · GHSA-gpg2-6gwq-vf2g

Missing initialization of resource in [UNKNOWN] cockpit

Priority MEDIUM 41

It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly resulting in a denial of service attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04858 Published 2019-03-26 Fixed CWE-909