cockpit-bridge vulnerabilities (Red Hat)
9 vulnerabilities.
-
cockpit-bridgeRed Hat Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 8.0 High -
cockpit-bridgeRed Hat Cockpit: cockpit: unauthenticated remote code execution due to ssh command-line argument injection 9.8 Critical -
cockpit-bridgeRed Hat lodash vulnerable to Code Injection via `_.template` imports key names 8.1 High -
cockpit-bridgeRed Hat lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` 6.5 Medium -
cockpit-bridgeRed Hat Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 3.2 Low -
cockpit-bridgeRed Hat Cockpit: command injection when deleting a sosreport with a crafted name 7.3 High -
cockpit-bridgeRed Hat A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate... 7.5 High -
cockpit-bridgeRed Hat Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to... 4.3 Medium -
cockpit-bridgeRed Hat It was found that cockpit before version 184 used glib's base64 decode functionality incorrectly... 7.5 High