CVE-2023-0759: privilege chaining in cockpit-hq/cockpit
Published Feb 9, 2023
·Updated
privilege chaining in cockpit-hq/cockpit
Other sources
Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.
Affected Software
3 affected componentsFixes available
Agentejo Cockpit<2.3.8
composer/cockpit-hq/cockpit<2.3.8
2.3.8
composer/cockpit-hq/cockpit<2.3.8
2.3.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.3.8
Event History
Feb 9, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
via GitHub·03:30 PM
Data Sourced
via GitHub·03:30 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via Packagist·03:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2023-0759?
CVE-2023-0759 is a vulnerability in the GitHub repository cockpit-hq/cockpit prior to version 2.3.8.
2
What is the severity of CVE-2023-0759?
CVE-2023-0759 has a severity rating of 8.8, which is considered high.
3
How does privilege chaining occur in cockpit-hq/cockpit?
Privilege chaining occurs in cockpit-hq/cockpit prior to version 2.3.8, allowing an attacker to gain elevated privileges.
4
Is Agentejo Cockpit affected by CVE-2023-0759?
Yes, Agentejo Cockpit versions up to and excluding 2.3.8 are affected by CVE-2023-0759.
5
How can I fix CVE-2023-0759?
To fix CVE-2023-0759, update cockpit-hq/cockpit to version 2.3.8 or newer.