VDB
CVE-2021-3698
CVE-2021-3698
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.
EPSS 0.70% · 53.0th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.70%
53.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| redhat | enterprise_linux | 8.0 |
| cockpit-project | cockpit | 0 |
| n/a | cockpit | * |
Timeline
- Mar 8, 2022 CVE Published
- Mar 9, 2022 EPSS Score
- Apr 30, 2022 EPSS Score
- Jun 22, 2022 EPSS Score
- Aug 14, 2022 EPSS Score
- Oct 6, 2022 EPSS Score
- Nov 27, 2022 EPSS Score
- Jan 18, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 3, 2023 EPSS Score
- Jun 25, 2023 EPSS Score
- Aug 16, 2023 EPSS Score