Aheinze Cockpit vulnerabilities

1 known vulnerability affecting aheinze/cockpit.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2022-2713CRITICAL≥ 0, < 2.2.02022-08-09

CVE-2022-2713 [CRITICAL] CWE-613 Cockpit before 2.2.0 vulnerable to Insufficient Session Expiration Cockpit before 2.2.0 vulnerable to Insufficient Session Expiration Cockpit before version 2.2.0 is vulnerable to Insufficient Session Expiration. The application does not validate requests after password changes, allowing a user to change their account details even after an admin changes their password.