Логотип exploitDog
bind:"GHSA-7xr9-rmm4-cq6v" OR bind:"CVE-2022-2735"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-7xr9-rmm4-cq6v" OR bind:"CVE-2022-2735"

Количество 9

Количество 9

github логотип

GHSA-7xr9-rmm4-cq6v

около 3 лет назад

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 7.8
EPSS: Низкий
ubuntu логотип

CVE-2022-2735

около 3 лет назад

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 7.8
EPSS: Низкий
redhat логотип

CVE-2022-2735

около 3 лет назад

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 8.4
EPSS: Низкий
nvd логотип

CVE-2022-2735

около 3 лет назад

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 7.8
EPSS: Низкий
debian логотип

CVE-2022-2735

около 3 лет назад

A vulnerability was found in the PCS project. This issue occurs due to ...

CVSS3: 7.8
EPSS: Низкий
oracle-oval логотип

ELSA-2022-9754

около 3 лет назад

ELSA-2022-9754: pcs security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2022-9753

около 3 лет назад

ELSA-2022-9753: pcs security update (IMPORTANT)

EPSS: Низкий
fstec логотип

BDU:2022-05554

около 3 лет назад

Уязвимость утилиты для настройки программ corosync/pacemaker PCS, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии

CVSS3: 8.8
EPSS: Низкий
redos логотип

ROS-20250904-02

11 дней назад

Уязвимость pcs

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-7xr9-rmm4-cq6v

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 7.8
0%
Низкий
около 3 лет назад
ubuntu логотип
CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 7.8
0%
Низкий
около 3 лет назад
redhat логотип
CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 8.4
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

CVSS3: 7.8
0%
Низкий
около 3 лет назад
debian логотип
CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to ...

CVSS3: 7.8
0%
Низкий
около 3 лет назад
oracle-oval логотип
ELSA-2022-9754

ELSA-2022-9754: pcs security update (IMPORTANT)

около 3 лет назад
oracle-oval логотип
ELSA-2022-9753

ELSA-2022-9753: pcs security update (IMPORTANT)

около 3 лет назад
fstec логотип
BDU:2022-05554

Уязвимость утилиты для настройки программ corosync/pacemaker PCS, связанная с недостатками процедуры аутентификации, позволяющая нарушителю повысить свои привилегии

CVSS3: 8.8
0%
Низкий
около 3 лет назад
redos логотип
ROS-20250904-02

Уязвимость pcs

CVSS3: 8.8
0%
Низкий
11 дней назад

Уязвимостей на страницу