Vulnerabilities > CVE-2021-3660 - Improper Restriction of Rendered UI Layers or Frames vulnerability in multiple products

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cockpit-project

redhat

CWE-1021

NVD

Published: 2022-03-10

Updated: 2023-02-12

Summary

Cockpit (and its plugins) do not seem to protect itself against clickjacking. It is possible to render a page from a cockpit server via another website, inside an <iFrame> HTML entry. This may be used by a malicious website in clickjacking or similar attacks.

Vulnerable Configurations

Part	Description	Count
Application	Cockpit-Project Cockpit Project Cockpit 0.0.1 Cockpit Project Cockpit 0.2 Cockpit Project Cockpit 0.3 Cockpit Project Cockpit 0.4 Cockpit Project Cockpit 0.5 Cockpit Project Cockpit 0.6 Cockpit Project Cockpit 0.7 Cockpit Project Cockpit 0.8 Cockpit Project Cockpit 0.9 Cockpit Project Cockpit 0.10 Cockpit Project Cockpit 0.11 Cockpit Project Cockpit 0.12 Cockpit Project Cockpit 0.13 Cockpit Project Cockpit 0.14 Cockpit Project Cockpit 0.15 Cockpit Project Cockpit 0.16 Cockpit Project Cockpit 0.17 Cockpit Project Cockpit 0.18 Cockpit Project Cockpit 0.19 Cockpit Project Cockpit 0.20 Cockpit Project Cockpit 0.21 Cockpit Project Cockpit 0.22 Cockpit Project Cockpit 0.23 Cockpit Project Cockpit 0.24 Cockpit Project Cockpit 0.25 Cockpit Project Cockpit 0.26 Cockpit Project Cockpit 0.27 Cockpit Project Cockpit 0.28 Cockpit Project Cockpit 0.29 Cockpit Project Cockpit 0.30 Cockpit Project Cockpit 0.31 Cockpit Project Cockpit 0.32 Cockpit Project Cockpit 0.33 Cockpit Project Cockpit 0.34 Cockpit Project Cockpit 0.35 Cockpit Project Cockpit 0.36 Cockpit Project Cockpit 0.37 Cockpit Project Cockpit 0.38 Cockpit Project Cockpit 0.39 Cockpit Project Cockpit 0.40 Cockpit Project Cockpit 0.41 Cockpit Project Cockpit 0.42 Cockpit Project Cockpit 0.43 Cockpit Project Cockpit 0.44 Cockpit Project Cockpit 0.45 Cockpit Project Cockpit 0.46 Cockpit Project Cockpit 0.47 Cockpit Project Cockpit 0.48 Cockpit Project Cockpit 0.49 Cockpit Project Cockpit 0.50 Cockpit Project Cockpit 0.51 Cockpit Project Cockpit 0.52 Cockpit Project Cockpit 0.53 Cockpit Project Cockpit 0.54 Cockpit Project Cockpit 0.55 Cockpit Project Cockpit 0.56 Cockpit Project Cockpit 0.57 Cockpit Project Cockpit 0.58 Cockpit Project Cockpit 0.59 Cockpit Project Cockpit 0.60 Cockpit Project Cockpit 0.61 Cockpit Project Cockpit 0.62 Cockpit Project Cockpit 0.63 Cockpit Project Cockpit 0.64 Cockpit Project Cockpit 0.65 Cockpit Project Cockpit 0.66 Cockpit Project Cockpit 0.67 Cockpit Project Cockpit 0.68 Cockpit Project Cockpit 0.69 Cockpit Project Cockpit 0.70 Cockpit Project Cockpit 0.71 Cockpit Project Cockpit 0.72 Cockpit Project Cockpit 0.73 Cockpit Project Cockpit 0.74 Cockpit Project Cockpit 0.75 Cockpit Project Cockpit 0.76 Cockpit Project Cockpit 0.77 Cockpit Project Cockpit 0.78 Cockpit Project Cockpit 0.79 Cockpit Project Cockpit 0.80 Cockpit Project Cockpit 0.81 Cockpit Project Cockpit 0.82 Cockpit Project Cockpit 0.83 Cockpit Project Cockpit 0.84 Cockpit Project Cockpit 0.85 Cockpit Project Cockpit 0.86 Cockpit Project Cockpit 0.87 Cockpit Project Cockpit 0.88 Cockpit Project Cockpit 0.89 Cockpit Project Cockpit 0.90 Cockpit Project Cockpit 0.91 Cockpit Project Cockpit 0.92 Cockpit Project Cockpit 0.93 Cockpit Project Cockpit 0.94 Cockpit Project Cockpit 0.95 Cockpit Project Cockpit 0.96 Cockpit Project Cockpit 0.97 Cockpit Project Cockpit 0.98 Cockpit Project Cockpit 0.99 Cockpit Project Cockpit 0.100 Cockpit Project Cockpit 0.101 Cockpit Project Cockpit 0.102 Cockpit Project Cockpit 0.103 Cockpit Project Cockpit 0.104 Cockpit Project Cockpit 0.105 Cockpit Project Cockpit 0.106 Cockpit Project Cockpit 0.107 Cockpit Project Cockpit 0.108 Cockpit Project Cockpit 0.109 Cockpit Project Cockpit 0.110 Cockpit Project Cockpit 0.111 Cockpit Project Cockpit 0.112 Cockpit Project Cockpit 0.113 Cockpit Project Cockpit 0.114 Cockpit Project Cockpit 0.115 Cockpit Project Cockpit 0.116 Cockpit Project Cockpit 0.117 Cockpit Project Cockpit 1.0.0 Cockpit Project Cockpit 1.1.0 Cockpit Project Cockpit 1.2.0 Cockpit Project Cockpit 118 Cockpit Project Cockpit 119 Cockpit Project Cockpit 120 Cockpit Project Cockpit 121 Cockpit Project Cockpit 122 Cockpit Project Cockpit 123 Cockpit Project Cockpit 124 Cockpit Project Cockpit 125 Cockpit Project Cockpit 126 Cockpit Project Cockpit 127 Cockpit Project Cockpit 128 Cockpit Project Cockpit 129 Cockpit Project Cockpit 130 Cockpit Project Cockpit 131 Cockpit Project Cockpit 132 Cockpit Project Cockpit 133 Cockpit Project Cockpit 134 Cockpit Project Cockpit 135 Cockpit Project Cockpit 136 Cockpit Project Cockpit 137 Cockpit Project Cockpit 138 Cockpit Project Cockpit 139 Cockpit Project Cockpit 140 Cockpit Project Cockpit 141 Cockpit Project Cockpit 142 Cockpit Project Cockpit 143 Cockpit Project Cockpit 144 Cockpit Project Cockpit 145 Cockpit Project Cockpit 146 Cockpit Project Cockpit 147 Cockpit Project Cockpit 148 Cockpit Project Cockpit 149 Cockpit Project Cockpit 150 Cockpit Project Cockpit 151 Cockpit Project Cockpit 152 Cockpit Project Cockpit 153 Cockpit Project Cockpit 154 Cockpit Project Cockpit 155 Cockpit Project Cockpit 156 Cockpit Project Cockpit 157 Cockpit Project Cockpit 158 Cockpit Project Cockpit 159 Cockpit Project Cockpit 160 Cockpit Project Cockpit 161 Cockpit Project Cockpit 162 Cockpit Project Cockpit 163 Cockpit Project Cockpit 164 Cockpit Project Cockpit 165 Cockpit Project Cockpit 166 Cockpit Project Cockpit 167 Cockpit Project Cockpit 168 Cockpit Project Cockpit 169 Cockpit Project Cockpit 170 Cockpit Project Cockpit 171 Cockpit Project Cockpit 172 Cockpit Project Cockpit 173 Cockpit Project Cockpit 173.1 Cockpit Project Cockpit 173.2 Cockpit Project Cockpit 174 Cockpit Project Cockpit 175 Cockpit Project Cockpit 176 Cockpit Project Cockpit 177 Cockpit Project Cockpit 178 Cockpit Project Cockpit 179 Cockpit Project Cockpit 180 Cockpit Project Cockpit 181 Cockpit Project Cockpit 182 Cockpit Project Cockpit 183 Cockpit Project Cockpit 184 Cockpit Project Cockpit 184.1 Cockpit Project Cockpit 185 Cockpit Project Cockpit 186 Cockpit Project Cockpit 187 Cockpit Project Cockpit 188 Cockpit Project Cockpit 189 Cockpit Project Cockpit 190 Cockpit Project Cockpit 234 Cockpit Project Cockpit 235 Cockpit Project Cockpit 236 Cockpit Project Cockpit 237 Cockpit Project Cockpit 238 Cockpit Project Cockpit 238.1 Cockpit Project Cockpit 238.2 Cockpit Project Cockpit 239 Cockpit Project Cockpit 240 Cockpit Project Cockpit 241 Cockpit Project Cockpit 242 Cockpit Project Cockpit 243 Cockpit Project Cockpit 244 Cockpit Project Cockpit 244.1 Cockpit Project Cockpit 245 Cockpit Project Cockpit 246 Cockpit Project Cockpit 247 Cockpit Project Cockpit 248 Cockpit Project Cockpit 249 Cockpit Project Cockpit 250 Cockpit Project Cockpit 251 Cockpit Project Cockpit 251.1 Cockpit Project Cockpit 251.2 Cockpit Project Cockpit 251.3 Cockpit Project Cockpit 252 Cockpit Project Cockpit 253	222
OS	Redhat Redhat Enterprise Linux 8.0	1

Common Weakness Enumeration (CWE)

CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References