CVE-2022-2713 HIGH

CVE-2022-2713: Insufficient Session Expiration in cockpit-hq/cockpit

Vendor Cockpit-Hq
Product cockpit-hq/cockpit
Weakness CWE-613 · Insufficient session expiration
Published August 8, 2022
Last update March 27, 2026
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

What the vulnerability does

01Description

Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0.

Key dates

02Disclosure timeline

August 8, 2022 CVE published
March 27, 2026 Record updated