CVE-2023-37649

State: Published
Severity: Not scored
Published: Jul 20, 2023
Updated: Oct 24, 2024
Reserved: Jul 10, 2023

Description

Incorrect access control in the component /models/Content of Cockpit CMS v2.5.2 allows unauthorized attackers to access sensitive data.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.ghostccamm.com/blog/multi_cockpit_vulns/
https://github.com/Cockpit-HQ/Cockpit/releases/tag/2.6.0

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.