Поиск уязвимостей
Количество 11
Количество 11
BDU:2022-05554
Уязвимость утилиты для настройки программ corosync/pacemaker PCS, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии
ROS-20250904-02
Уязвимость pcs
ALT-PU-2022-3215
ALT-PU-2022-3215: package `pcs` update to version 0.11.4-alt1
ALT-PU-2023-5630
ALT-PU-2023-5630: package `pcs` update to version 0.11.5-alt2.1
CVE-2022-2735
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.
CVE-2022-2735
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.
CVE-2022-2735
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.
CVE-2022-2735
A vulnerability was found in the PCS project. This issue occurs due to ...
GHSA-7xr9-rmm4-cq6v
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.
ELSA-2022-9754
ELSA-2022-9754: pcs security update (IMPORTANT)
ELSA-2022-9753
ELSA-2022-9753: pcs security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2022-05554 Уязвимость утилиты для настройки программ corosync/pacemaker PCS, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии | CVSS3: 8.8 | 0% Низкий | около 4 лет назад |
 | ROS-20250904-02 Уязвимость pcs | CVSS3: 8.8 | 0% Низкий | около 1 года назад |
| ALT-PU-2022-3215 ALT-PU-2022-3215: package `pcs` update to version 0.11.4-alt1 | CVSS3: 8.8 | 0% Низкий | почти 4 года назад |
| ALT-PU-2023-5630 ALT-PU-2023-5630: package `pcs` update to version 0.11.5-alt2.1 | CVSS3: 8.8 | около 3 лет назад | |
 | CVE-2022-2735 A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS. | CVSS3: 7.8 | 0% Низкий | около 4 лет назад |
 | CVE-2022-2735 A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS. | CVSS3: 8.4 | 0% Низкий | около 4 лет назад |
 | CVE-2022-2735 A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS. | CVSS3: 7.8 | 0% Низкий | около 4 лет назад |
| CVE-2022-2735 A vulnerability was found in the PCS project. This issue occurs due to ... | CVSS3: 7.8 | 0% Низкий | около 4 лет назад |
| GHSA-7xr9-rmm4-cq6v A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS. | CVSS3: 7.8 | 0% Низкий | около 4 лет назад |
| ELSA-2022-9754 ELSA-2022-9754: pcs security update (IMPORTANT) | 0% Низкий | около 4 лет назад | |
| ELSA-2022-9753 ELSA-2022-9753: pcs security update (IMPORTANT) | 0% Низкий | около 4 лет назад |
Уязвимостей на страницу