CVE-2022-2818

    Dashboard / Vulnerabilities / CVE-2022-2818

    CVE-2022-2818

    Published: 15 Aug 2022Last Modified: 12 Aug 2026

    Summary: Improper Removal of Sensitive Information Before Storage or Transfer in cockpit-hq/cockpit

    Details: Improper Removal of Sensitive Information Before Storage or Transfer in GitHub repository cockpit-hq/cockpit prior to 2.2.2.

    References: https://huntr.dev/bounties/ee27e5df-516b-4cf4-9f28-346d907b5491, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2818.json, https://nvd.nist.gov/vuln/detail/CVE-2022-2818, https://github.com/cockpit-hq/cockpit/commit/4bee1b903ee20818f4a8ecb9d974b9536cc54cb4

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -868738c6169d6a72d115aa46457c4c6d7339c408

    Affected versions

    2.2.1
    2.2.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-2818 | CVE-DB