CVE-2022-2818: Improper Authentication

August 16, 2022 (updated August 18, 2022)

Authentication Bypass by Primary Weakness in GitHub repository cockpit-hq/cockpit prior to 2.2.2.

References

github.com/advisories/GHSA-8wj3-cpmr-8whp
github.com/cockpit-hq/cockpit/commit/4bee1b903ee20818f4a8ecb9d974b9536cc54cb4
huntr.dev/bounties/ee27e5df-516b-4cf4-9f28-346d907b5491
nvd.nist.gov/vuln/detail/CVE-2022-2818

Detect and mitigate CVE-2022-2818 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →