Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2022-2553

Опубликовано: 28 июл. 2022
Источник: debian

Описание

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
boothfixed1.0-268-gdce51f9-1package

Примечания

  • https://github.com/ClusterLabs/booth/issues/114

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 3 лет назад

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

CVSS3: 6.5
redhat
больше 3 лет назад

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

CVSS3: 6.5
nvd
больше 3 лет назад

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

CVSS3: 6.5
msrc
почти 3 года назад

The authfile directive in the booth config file is ignored preventing use of authentication in communications from node to node. As a result nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

suse-cvrf
больше 3 лет назад

Security update for booth