Количество 9
Количество 9
CVE-2026-92747
A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies.
CVE-2026-92747
A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies.
CVE-2026-92747
A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies.
CVE-2026-92747
A flaw was found in `cockpit-machines`. This vulnerability allows a lo ...
GHSA-8p9r-6652-9xc4
A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies.
RLSA-2026:86971
Moderate: cockpit-machines security update
RLSA-2026:86970
Moderate: cockpit-machines security update
ELSA-2026-86971
ELSA-2026-86971: cockpit-machines security update (MODERATE)
ELSA-2026-86970
ELSA-2026-86970: cockpit-machines security update (MODERATE)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-92747 A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies. | CVSS3: 5 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-92747 A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies. | CVSS3: 5 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-92747 A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies. | CVSS3: 5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-92747 A flaw was found in `cockpit-machines`. This vulnerability allows a lo ... | CVSS3: 5 | 0% Низкий | около 1 месяца назад |
| GHSA-8p9r-6652-9xc4 A flaw was found in `cockpit-machines`. This vulnerability allows a local attacker with the ability to inspect running processes to expose sensitive guest virtual machine (VM) credentials, such as `rootPassword` and `userPassword`. This occurs when the `install_machine.py` script passes these credentials as a JSON command-line argument during VM creation or installation. The exposure is limited to the period when the installation workflow is active and depends on host process-visibility policies. | CVSS3: 5 | 0% Низкий | около 1 месяца назад |
 | RLSA-2026:86971 Moderate: cockpit-machines security update | 5 дней назад | ||
| RLSA-2026:86970 Moderate: cockpit-machines security update | 5 дней назад | ||
| ELSA-2026-86971 ELSA-2026-86971: cockpit-machines security update (MODERATE) | 6 дней назад | ||
| ELSA-2026-86970 ELSA-2026-86970: cockpit-machines security update (MODERATE) | 5 дней назад |
Уязвимостей на страницу