CVE-2024-2947

published 2024-03-28

CVE-2024-2947: A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in…

Priority P3 39 high 7.3 CVSS 3.1

AV L AC L PR L UI R S U C H I H A H

A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
agentejo	cockpit	>= 0 < 287.1-0+deb12u1	287.1-0+deb12u1
agentejo	cockpit	>= 0 < 314-1	314-1
agentejo	cockpit	>= 0 < 314-1	314-1
debian	cockpit	< cockpit 287.1-0+deb12u1 (bookworm)	cockpit 287.1-0+deb12u1 (bookworm)

CVSS provenance

nvd v3.1 7.3 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

osv 7.3 HIGH

vendor_debian 7.3 HIGH

vendor_redhat 7.3 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-77