PT-2023-16790 · Cockpit · Cockpit

Published 2023-03-03 · Updated 2023-03-14 · CVE-2023-1160

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions cockpit versions prior to 2.4.0

Description The issue concerns the use of platform-dependent third-party components in the GitHub repository cockpit-hq/cockpit. A patch is available and is anticipated to be part of version 2.4.0.

Recommendations For versions prior to 2.4.0, update to version 2.4.0 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-1103

Related Identifiers

CVE-2023-1160

GHSA-P8CQ-PV6W-6RWX

Affected Products

Cockpit

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/1xxx/CVE-2023-1160.json · Exploit
• 🔥 https://huntr.dev/bounties/3ce480dc-1b1c-4230-9287-0dc3b31c2f87 · Exploit
• https://github.com/cockpit-hq/cockpit/commit/690016208850f2d788ebc3c67884d4c692587eb8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-1160 · Security Note
• https://osv.dev/vulnerability/GHSA-p8cq-pv6w-6rwx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-1160 · Vendor Advisory
• https://github.com/cockpit-hq/cockpit · Note
• https://t.me/cibsecurity/59355 · Telegram Post