2022-06-27
ALT-BU-2022-5300-1
Branch sisyphus_mipsel update bulletin.
Package pcs updated to version 0.11.3-alt1 for branch sisyphus_mipsel.
Closed vulnerabilities
Published: 2022-09-06
BDU:2022-05543
Уязвимость утилиты для настройки программ corosync/pacemaker PCS, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии
Severity: HIGH (8.8)
Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2022-03-25
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2022-1049
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.
Severity: HIGH (8.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References: