Advisories · Technology
cockpit.
Every CVE that names cockpit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Cockpit CMS 2.14.1 Account Enumeration via Timing Discrepancy in /auth/check
- cockpit
- CWE-208
- CVSS 2.3 Low
Cockpit CMS 2.12.0 before 2.14.1 Disabled TLS Verification via cron.php
- cockpit
- Weak cryptography or TLS
- CVSS 6.9 Medium
Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
- cockpit
- CWE-208
- CVSS 8.2 High
Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php
- cockpit
- Path traversal
-
Improper certificate validation in cockpit
- cockpit
- Weak cryptography or TLS
-
Clickjacking in cockpit
- cockpit
- CWE-1021