Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-56251
HistoryAug 10, 2022 - 12:00 a.m.

Cockpit Access Control Error Vulnerability

2022-08-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
cockpit
access control
error
vulnerability
version 2.2.0
session expiration
attacker
account
expired credentials
control

EPSS

0.002

Percentile

57.1%

Cockpit is an interactive server administration interface.An access control error vulnerability exists in versions of Cockpit prior to 2.2.0, which stems from insufficient session expiration. An attacker could exploit this vulnerability to take control of an account using expired session credentials.

EPSS

0.002

Percentile

57.1%