CyberRota Analysis
AI-GeneratedCockpit CMS has a critical authorization flaw in its Bucket file storage API, allowing any authenticated user to execute bucket operations without proper access controls. This vulnerability can lead to unauthorized access and manipulation of sensitive files, including those restricted for admin use. Organizations using Cockpit CMS should prioritize remediation to prevent potential data breaches and unauthorized file management.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Cockpit CMS contains a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes bucket commands (ls, upload, removefiles, rename, createfolder) without performing any ACL or role check. Any authenticated user, regardless of role, can perform all bucket operations on any named bucket, including buckets intended for admin use only.