Lucene search
HistoryMar 28, 2024 - 7:15 p.m.
CVE-2024-2947
cockpit
command injection
privilege escalation
security vulnerability
cve-2024-2947
web interface
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.3%
A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer.
Related
debiancve
debiancve
CVE-2024-2947
2024-03-28 19:15:48
ubuntucve
ubuntucve
CVE-2024-2947
2024-03-28 00:00:00
osv
osv
Moderate: cockpit security update
2024-06-14 13:59:16
cockpit - security update
2024-04-04 00:00:00
Moderate: cockpit security update
2024-06-06 00:00:00
redhat
redhat
(RHSA-2024:3843) Moderate: cockpit security update
2024-06-11 18:28:01
(RHSA-2024:3667) Moderate: cockpit security update
2024-06-06 08:23:46
almalinux
almalinux
Moderate: cockpit security update
2024-06-11 00:00:00
Moderate: cockpit security update
2024-06-06 00:00:00
rocky
rocky
cockpit security update
2024-06-14 13:59:16
nessus
nessus
AlmaLinux 8 : cockpit (ALSA-2024:3667)
2024-06-06 00:00:00
Fedora 38 : cockpit (2024-31e83b461d)
2024-04-18 00:00:00
RHEL 9 : cockpit (RHSA-2024:3843)
2024-06-12 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2024-6065341780)
2024-04-03 00:00:00
Fedora: Security Advisory for cockpit (FEDORA-2024-31e83b461d)
2024-05-27 00:00:00
Fedora: Security Advisory (FEDORA-2024-4e95f130fc)
2024-04-03 00:00:00
oraclelinux
oraclelinux
cockpit security update
2024-06-11 00:00:00
cockpit security update
2024-06-06 00:00:00
cve
cve
CVE-2024-2947
2024-03-28 19:15:48
fedora
fedora
[SECURITY] Fedora 39 Update: cockpit-314-1.fc39
2024-03-30 01:11:05
[SECURITY] Fedora 40 Update: cockpit-314-1.fc40
2024-03-31 00:20:39
[SECURITY] Fedora 38 Update: cockpit-311.2-1.fc38
2024-04-18 01:14:43
vulnrichment
vulnrichment
debian
debian
[SECURITY] [DSA 5655-1] cockpit security update
2024-04-04 18:58:35
veracode
veracode
Command Injection
2024-04-04 10:52:12
cvelist
cvelist
redhatcve
redhatcve
CVE-2024-2947
2024-03-27 13:51:46
CVSS3
7.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
16.3%
Related for NVD:CVE-2024-2947