cockpit vulnerabilities (openEuler)
6 vulnerabilities.
-
cockpitopenEuler Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html 7.5 High -
cockpitopenEuler Cockpit: cockpit: arbitrary command execution via crafted links in system logs ui 8.0 High -
cockpitopenEuler Cockpit: authenticated user can kill any process when enabling pam_env's user_readenv option 3.2 Low -
cockpitopenEuler Cockpit: command injection when deleting a sosreport with a crafted name 7.3 High -
cockpitopenEuler Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to... 4.3 Medium -
cockpitopenEuler ** DISPUTED ** An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is... 6.5 Medium