cockpit-hq/cockpit · Security
Cockpit Content Platform vulnerable to 2FA bypass
- GHSA ID
- GHSA-8wj3-cpmr-8whp
- CVE ID
- CVE-2022-2818
- Severity
- high
- Published
- Updated
- CVSS
- 8.8 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v3
- 8.8 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Cockpit Content Platform through version 2.2.1 is vulnerable to a two-factor authentication (2FA) bypass. The 2FA secret is disclosed in a JWT token after user logs into their account, allowing an attacker to bypass the 2FA code. A patch is available on the develop branch and is expected to be part of version 2.2.2.
CWEs
- CWE-212 · Improper Removal of Sensitive Information Before Storage or Transfer
- CWE-287 · Improper Authentication
- CWE-305 · Authentication Bypass by Primary Weakness