PT-2023-16790 · Cockpit · Cockpit

Publicado 2023-03-03 · Atualizado 2023-03-14 · CVE-2023-1160

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions cockpit versions prior to 2.4.0

Description The issue concerns the use of platform-dependent third-party components in the GitHub repository cockpit-hq/cockpit. A patch is available and is anticipated to be part of version 2.4.0.

Recommendations For versions prior to 2.4.0, update to version 2.4.0 to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-1103

Identificadores relacionados

CVE-2023-1160

GHSA-P8CQ-PV6W-6RWX

Produtos afetados

Cockpit

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1160.json · Exploit
• 🔥 https://huntr.dev/bounties/3ce480dc-1b1c-4230-9287-0dc3b31c2f87 · Exploit
• https://github.com/cockpit-hq/cockpit · Nota
• https://github.com/cockpit-hq/cockpit/commit/690016208850f2d788ebc3c67884d4c692587eb8 · Correção
• https://t.me/cibsecurity/59355 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-1160 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-p8cq-pv6w-6rwx · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-1160 · Aviso do Fabricante