CVE-2021-3698 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-3698 Interim 1 8 2025-02-17T00:59:23Z current 2021-08-28T01:02:15Z 2025-02-17T00:59:23Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-3698 A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 8 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 cockpit cockpit-264.1-1.el8 cockpit-bridge cockpit-bridge-264.1-1.el8 cockpit-dashboard cockpit-doc-264.1-1.el8 cockpit-networkmanager cockpit-selinux cockpit-storaged cockpit-system cockpit-system-264.1-1.el8 cockpit-ws cockpit-ws-264.1-1.el8 cockpit-264.1-1.el8 as a component of SUSE Liberty Linux 8 cockpit-bridge-264.1-1.el8 as a component of SUSE Liberty Linux 8 cockpit-doc-264.1-1.el8 as a component of SUSE Liberty Linux 8 cockpit-system-264.1-1.el8 as a component of SUSE Liberty Linux 8 cockpit-ws-264.1-1.el8 as a component of SUSE Liberty Linux 8 cockpit as a component of SUSE Linux Enterprise Micro 5.1 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.1 cockpit-dashboard as a component of SUSE Linux Enterprise Micro 5.1 cockpit-system as a component of SUSE Linux Enterprise Micro 5.1 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.1 cockpit as a component of SUSE Linux Enterprise Micro 5.2 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.2 cockpit-system as a component of SUSE Linux Enterprise Micro 5.2 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.2 cockpit as a component of SUSE Linux Enterprise Micro 5.3 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.3 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.3 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.3 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.3 cockpit-system as a component of SUSE Linux Enterprise Micro 5.3 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.3 cockpit as a component of SUSE Linux Enterprise Micro 5.4 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.4 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.4 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.4 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.4 cockpit-system as a component of SUSE Linux Enterprise Micro 5.4 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.4 cockpit as a component of SUSE Linux Enterprise Micro 5.5 cockpit-bridge as a component of SUSE Linux Enterprise Micro 5.5 cockpit-networkmanager as a component of SUSE Linux Enterprise Micro 5.5 cockpit-selinux as a component of SUSE Linux Enterprise Micro 5.5 cockpit-storaged as a component of SUSE Linux Enterprise Micro 5.5 cockpit-system as a component of SUSE Linux Enterprise Micro 5.5 cockpit-ws as a component of SUSE Linux Enterprise Micro 5.5 A flaw was found in Cockpit in versions prior to 260 in the way it handles the certificate verification performed by the System Security Services Daemon (SSSD). This flaw allows client certificates to authenticate successfully, regardless of the Certificate Revocation List (CRL) configuration or the certificate status. The highest threat from this vulnerability is to confidentiality. CVE-2021-3698 SUSE Liberty Linux 8:cockpit-264.1-1.el8 SUSE Liberty Linux 8:cockpit-bridge-264.1-1.el8 SUSE Liberty Linux 8:cockpit-doc-264.1-1.el8 SUSE Liberty Linux 8:cockpit-system-264.1-1.el8 SUSE Liberty Linux 8:cockpit-ws-264.1-1.el8 SUSE Linux Enterprise Micro 5.1:cockpit SUSE Linux Enterprise Micro 5.1:cockpit-bridge SUSE Linux Enterprise Micro 5.1:cockpit-dashboard SUSE Linux Enterprise Micro 5.1:cockpit-system SUSE Linux Enterprise Micro 5.1:cockpit-ws SUSE Linux Enterprise Micro 5.2:cockpit SUSE Linux Enterprise Micro 5.2:cockpit-bridge SUSE Linux Enterprise Micro 5.2:cockpit-system SUSE Linux Enterprise Micro 5.2:cockpit-ws SUSE Linux Enterprise Micro 5.3:cockpit SUSE Linux Enterprise Micro 5.3:cockpit-bridge SUSE Linux Enterprise Micro 5.3:cockpit-networkmanager SUSE Linux Enterprise Micro 5.3:cockpit-selinux SUSE Linux Enterprise Micro 5.3:cockpit-storaged SUSE Linux Enterprise Micro 5.3:cockpit-system SUSE Linux Enterprise Micro 5.3:cockpit-ws SUSE Linux Enterprise Micro 5.4:cockpit SUSE Linux Enterprise Micro 5.4:cockpit-bridge SUSE Linux Enterprise Micro 5.4:cockpit-networkmanager SUSE Linux Enterprise Micro 5.4:cockpit-selinux SUSE Linux Enterprise Micro 5.4:cockpit-storaged SUSE Linux Enterprise Micro 5.4:cockpit-system SUSE Linux Enterprise Micro 5.4:cockpit-ws SUSE Linux Enterprise Micro 5.5:cockpit SUSE Linux Enterprise Micro 5.5:cockpit-bridge SUSE Linux Enterprise Micro 5.5:cockpit-networkmanager SUSE Linux Enterprise Micro 5.5:cockpit-selinux SUSE Linux Enterprise Micro 5.5:cockpit-storaged SUSE Linux Enterprise Micro 5.5:cockpit-system SUSE Linux Enterprise Micro 5.5:cockpit-ws important 5 AV:N/AC:L/Au:N/C:P/I:N/A:N 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N