Security Resilience

CVE-2023-1160

Agentejo Cockpit ≤ 2.3.9

Public PoC
Published
03 March 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score 0.0035 27th percentile
Risk Priority 43 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-1160 is a medium-severity Use of Platform-Dependent Third Party Components (CWE-1103) vulnerability in Agentejo Cockpit. Its CVSS base score is 5.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Data Obfuscation (T1001); ranked at the 27th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

Use of Platform-Dependent Third Party Components in GitHub repository cockpit-hq/cockpit prior to 2.4.0.

CWE(s)
CWE-1103

Related Threats

MITRE ATT&CK Enterprise Techniques

T1001 Data Obfuscation Command And Control
Adversaries may obfuscate command and control traffic to make it more difficult to detect.
attack.mitre.org →
T1001.003 Protocol or Service Impersonation Command And Control
Adversaries may impersonate legitimate protocols or web service traffic to disguise command and control activity and thwart analysis efforts.
attack.mitre.org →
T1003 OS Credential Dumping Credential Access
Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password.
attack.mitre.org →
T1003.001 LSASS Memory Credential Access
Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
attack.mitre.org →
T1003.002 Security Account Manager Credential Access
Adversaries may attempt to extract credential material from the Security Account Manager (SAM) database either through in-memory techniques or through the Windows Registry where the SAM database is stored.
attack.mitre.org →
T1003.005 Cached Domain Credentials Credential Access
Adversaries may attempt to access cached domain credentials used to allow authentication to occur in the event a domain controller is unavailable.
attack.mitre.org →
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2020-35847Same product: Agentejo Cockpit
CVE-2023-4433Same product: Agentejo Cockpit
CVE-2023-4451Same product: Agentejo Cockpit
CVE-2020-35846Same product: Agentejo Cockpit
CVE-2020-35131Same product: Agentejo Cockpit
CVE-2023-4196Same product: Agentejo Cockpit
CVE-2023-4321Same product: Agentejo Cockpit
CVE-2023-37650Same product: Agentejo Cockpit
CVE-2024-4825Same product: Agentejo Cockpit
CVE-2023-41564Same product: Agentejo Cockpit

Affected Assets

agentejo
cockpit
≤ 2.3.9

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)

—

Detect
Catch it (NIST detect / respond)

—

Harden
Shrink the surface (DISA STIG)

—

Validate
Prove the fix (OWASP ASVS)
  • V15.1.4
  • V15.2.5

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

GV.SC-01 partial match
blocks

Supply-chain program can require cross-platform evaluation criteria for third-party components.

GV.SC-05 partial match
blocks

Contractual requirements can mandate platform-portability or equivalent functionality specifications.

GV.SC-07 partial match
blocks

Understanding supplier-product risks includes platform-dependency and compatibility issues.

ID.AM-02 partial match
blocks

Software inventory enables tracking of third-party components and their platform coverage.

ID.AM-04 partial match
blocks

Supplier-service inventory surfaces external components whose platform limitations affect the organization.

ID.AM-08 partial match
blocks

Lifecycle management includes evaluating third-party component suitability across target platforms.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

A.5.19 Information security in supplier relationships partial match
degrades

Supplier-relationship controls can require vendors to provide cross-platform support or equivalent functionality.

A.5.20 Addressing information security within supplier agreements partial match
degrades

Supplier agreements can mandate platform-independence or portability clauses for third-party components.

A.5.21 Managing information security in the ICT supply chain partial match
degrades

ICT supply-chain management can identify and mitigate risks from platform-dependent third-party components.

A.5.22 Monitoring, review and change management of supplier services partial match
degrades

Ongoing monitoring of supplier services can detect and drive remediation of platform-dependency issues.

A.8.20 Networks security partial match
removes
A.8.25 Secure development life cycle partial match
degrades

Secure SDLC practices can include portability and cross-platform testing requirements for third-party components.

References