GHSA-8wj3-cpmr-8whp

Cockpit Content Platform vulnerable to 2FA bypass

Source: GitHub Advisory Database (reviewed) High CVE-2022-2818

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	cockpit-hq/cockpit	< 2.2.2	2.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

Cockpit Content Platform through version 2.2.1 is vulnerable to a two-factor authentication (2FA) bypass. The 2FA secret is disclosed in a JWT token after user logs into their account, allowing an attacker to bypass the 2FA code. A patch is available on the `develop` branch and is expected to be part of version 2.2.2.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-2818 advisory
https://github.com/cockpit-hq/cockpit/commit/4bee1b903ee20818f4a8ecb9d974b9536cc54cb4 web
https://github.com/cockpit-hq/cockpit package
https://huntr.dev/bounties/ee27e5df-516b-4cf4-9f28-346d907b5491 web