CVE-2022-2713

Insufficient Session Expiration in cockpit-hq/cockpit

Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0.

Affected

cockpit-hq · cockpit-hq/cockpit

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0 HUNTR

8.6 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

EPSS

1.27% chance of exploitation in the next 30 days, 69th percentile

Published

2022-08-08

Updated

2026-03-27

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/3080fc96-75d7-4868-84de-9fc8c9b90290

Security advisories

• cockpit-hq/cockpit/commit/dd8d0314912fa6517ebd2cc9939d9fafbe68731b
• advisories/GHSA-vm6p-35rw-3fxc

References

• CVE Record
• NVD entry