CVE-2007-2232

Published: Apr 25, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r) sequences in the cosign cookie parameter.

Affected (12)

Products: Cosign: Cosign

Cosign

1 product

Cosign

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Cosign Cosign	Version 0.7.0
Cosign Cosign	Version 0.8.0
Cosign Cosign	Version 0.9.0
Cosign Cosign	Version 1.0
Cosign Cosign	Version 1.1
Cosign Cosign	Version 1.5
Cosign Cosign	Version 1.6
Cosign Cosign	Version 1.7
Cosign Cosign	Version 1.8.5
Cosign Cosign	Version 1.8
Cosign Cosign	Version 1.9
Cosign Cosign	Version 2.0.1