128 matches found
MiracleLinux 9 : cockpit-machines-348.1-1.el9_8 (AXSA:2026-2146:02)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-2146:02 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive...
AlmaLinux 9 : cockpit-machines (ALSA-2026:86970)
The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:86970 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data...
Oracle Linux 9 : cockpit-machines (ELSA-2026-86970)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-86970 advisory. - CVE-2026-92768 RHEL-263127 - CVE-2026-92747 RHEL-263114 Tenable has extracted the preceding description block directly from the Oracle Linux securit...
RLSA-2026:86971 Moderate: cockpit-machines security update
Cockpit component for managing libvirt virtual machines. Security Fixes: cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list...
cockpit-machines security update
An update is available for cockpit-machines. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit component for managing libvirt virtual machines. Security...
RLSA-2026:86970 Moderate: cockpit-machines security update
Cockpit component for managing libvirt virtual machines. Security Fixes: cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list...
cockpit-machines security update
An update is available for cockpit-machines. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Cockpit component for managing libvirt virtual machines. Security...
Rocky Linux 9 [CIQ] Security Update: cockpit-machines Multiple Vulnerabilities (crlsa-2026_86970)
The Rocky Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686970 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data...
AlmaLinux 10 : cockpit-machines (ALSA-2026:86971)
The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:86971 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Data...
cockpit-machines security update
348.1-1.0.1 - Apply the patch for upstream reference Orabug: 39248919 - Replace upstream references Orabug: 34340088 348.1-1 - CVE-2026-92768 RHEL-263127 - CVE-2026-92747 RHEL-263114 - CVE-2026-92745 RHEL-263111...
Rocky Linux 10.2 [CIQ] Security Update: cockpit-machines Multiple Vulnerabilities (crlsa-2026_86971)
The Rocky Linux 10.2 host has a package installed that is affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686971 advisory. cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments CVE-2026-92768 cockpit-machines: cockpit-machines: Sensitive Dat...
cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...
cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments
A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...
Moderate: Red Hat Security Advisory: cockpit-machines security update
An update for cockpit-machines is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...
cockpit-machines: cockpit-machines: Information Disclosure of RHSM Offline Token via Process Arguments
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect process metadata to disclose a sensitive Red Hat Subscription Management RHSM offline token. The token is exposed when it is passed as a command-line argument to a helper script during the...
cockpit-machines: cockpit-machines: Sensitive Data Exposure of guest credentials via JSON argument in process list
A flaw was found in cockpit-machines. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine VM credentials, such as rootPassword and userPassword. This occurs when the installmachine.py script passes these credentials as...
cockpit-machines: cockpit-machines: Sensitive data exposure via command-line arguments
A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...
Moderate: Red Hat Security Advisory: cockpit-machines security update
An update for cockpit-machines is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...