Количество 10
Количество 10
CVE-2021-3020
An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive "shell" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root.
CVE-2021-3020
An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) throu ...
GHSA-cw6w-5gqc-jh8j
An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive "shell" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root.
BDU:2022-07050
Уязвимость графического веб-интерфейса для управления и мониторинга кластеров ClusterLabs Hawk, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнить произвольные команды от имени пользователя root
openSUSE-SU-2021:0410-1
Security update for crmsh
SUSE-SU-2021:0806-1
Security update for crmsh
SUSE-SU-2021:0782-1
Security update for crmsh
SUSE-SU-2021:0781-1
Security update for crmsh
SUSE-SU-2021:0771-1
Security update for crmsh
SUSE-SU-2021:0722-1
Security update for crmsh
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-3020 An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive "shell" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root. | CVSS3: 8.8 | 0% Низкий | больше 3 лет назад |
| CVE-2021-3020 An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) throu ... | CVSS3: 8.8 | 0% Низкий | больше 3 лет назад |
| GHSA-cw6w-5gqc-jh8j An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive "shell" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root. | CVSS3: 8.8 | 0% Низкий | больше 3 лет назад |
 | BDU:2022-07050 Уязвимость графического веб-интерфейса для управления и мониторинга кластеров ClusterLabs Hawk, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнить произвольные команды от имени пользователя root | CVSS3: 8.8 | 0% Низкий | больше 5 лет назад |
 | openSUSE-SU-2021:0410-1 Security update for crmsh | почти 5 лет назад | ||
| SUSE-SU-2021:0806-1 Security update for crmsh | почти 5 лет назад | ||
| SUSE-SU-2021:0782-1 Security update for crmsh | почти 5 лет назад | ||
| SUSE-SU-2021:0781-1 Security update for crmsh | почти 5 лет назад | ||
| SUSE-SU-2021:0771-1 Security update for crmsh | почти 5 лет назад | ||
| SUSE-SU-2021:0722-1 Security update for crmsh | почти 5 лет назад |
Уязвимостей на страницу