PT-2024-2657 · Cockpit+5 · Cockpit+5

Guilherme De Almeida Suckevicz · Published 2024-03-26 · Updated 2025-07-24 · CVE-2024-2947

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cockpit versions 270 and newer

Description A flaw was found in Cockpit, where deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue allows an attacker to execute arbitrary commands.

Recommendations For Cockpit versions 270 and newer, consider disabling the sosreport deletion feature via the Cockpit web interface until a patch is available. Restrict access to the Cockpit web interface to minimize the risk of exploitation. Avoid using crafted names when deleting sosreports to prevent command injection.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

ALSA-2024:3667

ALSA-2024:3843

BDU:2024-02724

CESA-2024_3667

CVE-2024-2947

DSA-5655-1

DSA-5655-2

INFSA-2024_3667

INFSA-2024_3843

RHSA-2024:3667

RHSA-2024:3843

RHSA-2024_3667

RHSA-2024_3843

RLSA-2024:3667

Affected Products

Almalinux

Centos

Cockpit

Red Hat

Red Os

Rocky Linux

References · 35

• https://osv.dev/vulnerability/UBUNTU-CVE-2024-2947 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/N3Q5SDIFACAY4VHACN5MMCMT3A53A3FB · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2024:3667 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:3667 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5655-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-2947 · Security Note
• https://osv.dev/vulnerability/DSA-5655-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-2947 · Security Note
• https://linux.oracle.com/errata/ELSA-2024-3667.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2024-3843.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-2947 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2024:3667 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2024:3843 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-3667.html · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory