PT-2024-37402 · Cockpit +4 · Cockpit +4

Name of the Vulnerable Software and Affected Versions: cockpit affected versions not specified Description: A flaw was found in the cockpit package, allowing an authenticated user to kill any process when enabling the pam env's user readenv option. This leads to a denial of service DoS attack...

CVE-2024-2947

A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer...

PT-2024-2657 · Cockpit +5 · Cockpit +5

Name of the Vulnerable Software and Affected Versions: Cockpit versions 270 and newer Description: A flaw was found in Cockpit, where deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue...

Cockpit CMS 安全漏洞

Cockpit is an interactive server management interface. A security vulnerability exists in Cockpit CMS version 2.5.2, which stems from an improper access control issue in component/models/Content that could allow an unauthorized attacker to access sensitive data...

SUSE CVE-2021-3660

Cockpit and its plugins do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an HTML entry. This may be used by a malicious website in clickjacking or similar attacks...

PT-2023-16522 · Cockpit · Cockpit

Name of the Vulnerable Software and Affected Versions: cockpit versions prior to 2.3.9 Description: The issue is related to improper restriction of rendered UI layers or frames. Recommendations: For versions prior to 2.3.9, update to version 2.3.9 or later to resolve the issue...

Cockpit 安全漏洞

Cockpit is an interactive server management interface. A security vulnerability exists in Cockpit. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor announcement...

Rocky Linux 8 : cockpit (RLSA-2022:2008)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:2008 advisory. - A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon SSSD...

cockpit: authenticates with revoked certificates

A flaw was found in Cockpit in the way it handles the certificate verification performed by the System Security Services Daemon SSSD. This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List CRL configuration or the certificate status. The...

Cockpit Code Injection Vulnerability

Cockpit is an interactive server management interface. A code injection vulnerability exists in versions prior to Cockpit 0.6.1 that allows an attacker to inject custom PHP code and enable remote command execution...

PT-2021-11714 · Cockpit · Cockpit

Name of the Vulnerable Software and Affected Versions: Cockpit versions prior to 0.6.1 Description: The issue allows an attacker to inject custom PHP code and achieve Remote Command Execution via the registerCriteriaFunction in lib/MongoLite/Database.php. This can be demonstrated by sending value...