CVE-2024-2947 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-2947 Interim 1 8 2025-02-16T01:49:30Z current 2024-03-29T00:09:34Z 2025-02-16T01:49:30Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-2947 A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 8 SUSE Liberty Linux 9 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Micro 6.0 cockpit cockpit-310.4-1.el8_10 cockpit-311.2-1.el9_4 cockpit-bridge cockpit-bridge-310.4-1.el8_10 cockpit-bridge-311.2-1.el9_4 cockpit-dashboard cockpit-doc-310.4-1.el8_10 cockpit-doc-311.2-1.el9_4 cockpit-networkmanager cockpit-packagekit-311.2-1.el9_4 cockpit-pcp-311.2-1.el9_4 cockpit-selinux cockpit-storaged cockpit-storaged-311.2-1.el9_4 cockpit-system cockpit-system-310.4-1.el8_10 cockpit-system-311.2-1.el9_4 cockpit-ws cockpit-ws-310.4-1.el8_10 cockpit-ws-311.2-1.el9_4 cockpit-310.4-1.el8_10 as a component of SUSE Liberty Linux 8 cockpit-bridge-310.4-1.el8_10 as a component of SUSE Liberty Linux 8 cockpit-doc-310.4-1.el8_10 as a component of SUSE Liberty Linux 8 cockpit-system-310.4-1.el8_10 as a component of SUSE Liberty Linux 8 cockpit-ws-310.4-1.el8_10 as a component of SUSE Liberty Linux 8 cockpit-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit-bridge-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit-doc-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit-packagekit-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit-pcp-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit-storaged-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit-system-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit-ws-311.2-1.el9_4 as a component of SUSE Liberty Linux 9 cockpit as a component of SUSE Linux Enterprise Micro 5.1 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.1 cockpit-dashboard as a component of SUSE Linux Enterprise Micro 5.1 cockpit-system as a component of SUSE Linux Enterprise Micro 5.1 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.1 cockpit as a component of SUSE Linux Enterprise Micro 5.2 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.2 cockpit-system as a component of SUSE Linux Enterprise Micro 5.2 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.2 cockpit as a component of SUSE Linux Enterprise Micro 5.3 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.3 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.3 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.3 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.3 cockpit-system as a component of SUSE Linux Enterprise Micro 5.3 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.3 cockpit as a component of SUSE Linux Enterprise Micro 5.4 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.4 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.4 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.4 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.4 cockpit-system as a component of SUSE Linux Enterprise Micro 5.4 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.4 cockpit as a component of SUSE Linux Enterprise Micro 5.5 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.5 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.5 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.5 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.5 cockpit-system as a component of SUSE Linux Enterprise Micro 5.5 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.5 cockpit as a component of SUSE Linux Micro 6.0 cockpit-bridge as a component of SUSE Linux Micro 6.0 cockpit-networkmanager as a component of SUSE Linux Micro 6.0 cockpit-selinux as a component of SUSE Linux Micro 6.0 cockpit-storaged as a component of SUSE Linux Micro 6.0 cockpit-system as a component of SUSE Linux Micro 6.0 cockpit-ws as a component of SUSE Linux Micro 6.0 A flaw was found in Cockpit. Deleting a sosreport with a crafted name via the Cockpit web interface can lead to a command injection vulnerability, resulting in privilege escalation. This issue affects Cockpit versions 270 and newer. CVE-2024-2947 SUSE Liberty Linux 8:cockpit-310.4-1.el8_10 SUSE Liberty Linux 8:cockpit-bridge-310.4-1.el8_10 SUSE Liberty Linux 8:cockpit-doc-310.4-1.el8_10 SUSE Liberty Linux 8:cockpit-system-310.4-1.el8_10 SUSE Liberty Linux 8:cockpit-ws-310.4-1.el8_10 SUSE Liberty Linux 9:cockpit-311.2-1.el9_4 SUSE Liberty Linux 9:cockpit-bridge-311.2-1.el9_4 SUSE Liberty Linux 9:cockpit-doc-311.2-1.el9_4 SUSE Liberty Linux 9:cockpit-packagekit-311.2-1.el9_4 SUSE Liberty Linux 9:cockpit-pcp-311.2-1.el9_4 SUSE Liberty Linux 9:cockpit-storaged-311.2-1.el9_4 SUSE Liberty Linux 9:cockpit-system-311.2-1.el9_4 SUSE Liberty Linux 9:cockpit-ws-311.2-1.el9_4 SUSE Linux Enterprise Micro 5.1:cockpit SUSE Linux Enterprise Micro 5.1:cockpit-bridge SUSE Linux Enterprise Micro 5.1:cockpit-dashboard SUSE Linux Enterprise Micro 5.1:cockpit-system SUSE Linux Enterprise Micro 5.1:cockpit-ws SUSE Linux Enterprise Micro 5.2:cockpit SUSE Linux Enterprise Micro 5.2:cockpit-bridge SUSE Linux Enterprise Micro 5.2:cockpit-system SUSE Linux Enterprise Micro 5.2:cockpit-ws SUSE Linux Enterprise Micro 5.3:cockpit SUSE Linux Enterprise Micro 5.3:cockpit-bridge SUSE Linux Enterprise Micro 5.3:cockpit-networkmanager SUSE Linux Enterprise Micro 5.3:cockpit-selinux SUSE Linux Enterprise Micro 5.3:cockpit-storaged SUSE Linux Enterprise Micro 5.3:cockpit-system SUSE Linux Enterprise Micro 5.3:cockpit-ws SUSE Linux Enterprise Micro 5.4:cockpit SUSE Linux Enterprise Micro 5.4:cockpit-bridge SUSE Linux Enterprise Micro 5.4:cockpit-networkmanager SUSE Linux Enterprise Micro 5.4:cockpit-selinux SUSE Linux Enterprise Micro 5.4:cockpit-storaged SUSE Linux Enterprise Micro 5.4:cockpit-system SUSE Linux Enterprise Micro 5.4:cockpit-ws SUSE Linux Enterprise Micro 5.5:cockpit SUSE Linux Enterprise Micro 5.5:cockpit-bridge SUSE Linux Enterprise Micro 5.5:cockpit-networkmanager SUSE Linux Enterprise Micro 5.5:cockpit-selinux SUSE Linux Enterprise Micro 5.5:cockpit-storaged SUSE Linux Enterprise Micro 5.5:cockpit-system SUSE Linux Enterprise Micro 5.5:cockpit-ws SUSE Linux Micro 6.0:cockpit SUSE Linux Micro 6.0:cockpit-bridge SUSE Linux Micro 6.0:cockpit-networkmanager SUSE Linux Micro 6.0:cockpit-selinux SUSE Linux Micro 6.0:cockpit-storaged SUSE Linux Micro 6.0:cockpit-system SUSE Linux Micro 6.0:cockpit-ws important 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H