CVE-2023-1160: Cockpit Uses Platform-Dependent Third Party Components
Cockpit Uses Platform-Dependent Third Party Components
Other sources
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit 2.3.9 and prior. A patch is available and anticipated to be part of version 2.4.0.
— GitHub
Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cockpit-hq/cockpitto a version that resolves this vulnerability.Fixed in 2.4.0
Event History
Frequently Asked Questions
What is CVE-2023-1160?
CVE-2023-1160 is a vulnerability related to the use of platform-dependent third-party components in the GitHub repository cockpit-hq/cockpit prior to version 2.4.0.
What is the severity of CVE-2023-1160?
CVE-2023-1160 has a severity keyword of medium and a severity value of 5.5.
How does CVE-2023-1160 affect Agentejo Cockpit?
CVE-2023-1160 affects Agentejo Cockpit version up to and including 2.3.9.
How can I fix CVE-2023-1160?
To fix CVE-2023-1160, update the GitHub repository cockpit-hq/cockpit to version 2.4.0 or later.
Where can I find more information about CVE-2023-1160?
You can find more information about CVE-2023-1160 in the following references: [1] [2].