CVE-2021-3698

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-295

Affected software

Vendor	Product	Versions
n/a	cockpit	cockpit versions prior to 260

References

https://bugzilla.redhat.com/show_bug.cgi?id=1992149Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1992149Issue Tracking, Third Party Advisory

Timeline

Published: Mar 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-369805.5Open vSwitch (aka openvswitch) 2.11.0 through 2.15.0 has a use-after-free in decode_NXAST_RAW_ENCAP (called from ofpact_decode and ofpacts_d CVE-2021-369818.8In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary cod CVE-2021-369828.1AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Inject CVE-2021-369837.8replay-sorcery-kms in Replay Sorcery 0.6.0 allows a local attacker to gain root privileges via a symlink attack on /tmp/replay-sorcery or /t CVE-2021-369857.5There is a Code injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may exhaust system resources and CVE-2021-369869.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permis CVE-2021-369875.9There is a issue that nodes in the linked list being freed for multiple times in Huawei Smartphone due to race conditions. Successful exploi CVE-2021-369887.5There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.CVE-2021-369899.8There is a Kernel crash vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permissions.CVE-2021-369909.8There is a vulnerability of tampering with the kernel in Huawei Smartphone.Successful exploitation of this vulnerability may escalate permis CVE-2021-369917.5There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vul CVE-2021-369927.5There is a Public key verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confi