Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-9A54ADF36408DD56A4D73694A2D9C282
HistoryAug 09, 2022 - 12:00 a.m.

Insufficient Session Expiration

2022-08-0900:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
7
github
repository
cockpit-hq
software
security bug

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.1%

Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0.

Affected configurations

Vulners
Node
packagistcockpitRange<2.2.0
VendorProductVersionCPE
packagistcockpit*cpe:2.3:a:packagist:cockpit:*:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

57.1%

Related for GITLAB-9A54ADF36408DD56A4D73694A2D9C282