Skip to content
Sign in
Not rated

CVE-2021-3698 A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the…

Description

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.

Affected products and versions

Product Affected versions Fixed in
cockpit Versions not published

Other CVEs of cockpit

The 3 CVEs of cockpit →
CVE-2025-7053 A vulnerability was found in Cockpit up to 2.11.3 5.1 Medium CVE-2021-3660 Cockpit (and its plugins) do not seem to protect itself against clickjacking Not rated
Track this CVE