Description
A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
cockpit
Default version status: unaffected
270 to < *affected
Red Hat Red Hat Enterprise Linux 8
Default version status: affected
0:310.4-1.el8_10 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:311.2-1.el9_4 to < *unaffected
Red Hat Red Hat Enterprise Linux 9
Default version status: affected
0:311.2-1.el9_4 to < *unaffected
Red Hat Red Hat Enterprise Linux 10
Default version status: unaffected
Red Hat Red Hat Enterprise Linux 7
Default version status: unaffected
References
- https://access.redhat.com/errata/RHSA-2024:3667 ↗
- https://access.redhat.com/errata/RHSA-2024:3843 ↗
- https://access.redhat.com/security/cve/CVE-2024-2947 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2271614 ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KNG7GXOZI6QH3OIQJYAYDB3CRRGH37Q5/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N3Q5SDIFACAY4VHACN5MMCMT3A53A3FB/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PIQY2HGDJW2JY27ALTS4GEVZZJJ4XQ36/ ↗