Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjxr-7f24-c564

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser.

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser.

EPSS

Процентиль: 94%
0.12988
Средний

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
nvd
около 5 лет назад

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser.

CVSS3: 9.8
debian
около 5 лет назад

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There ...

suse-cvrf
около 5 лет назад

Security update for hawk2

suse-cvrf
около 5 лет назад

Security update for hawk2

suse-cvrf
около 5 лет назад

Security update for hawk2

EPSS

Процентиль: 94%
0.12988
Средний

Дефекты

CWE-94