https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:59:54 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-07050 bdu:2022-07050 https://cve.radiocsirt.org/vuln/bdu:2022-07050 https://cve.radiocsirt.org/vuln/euvd-2026-20683 EUVD-2026-20683 https://cve.radiocsirt.org/vuln/euvd-2026-20683 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3020 <p>An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive &#34;shell&#34; that isn&#39;t limited to the commands specified in hawk_invoke, allowing escalation to root.</p> <p>An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive &#34;shell&#34; that isn&#39;t limited to the commands specified in hawk_invoke, allowing escalation to root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3020 https://cve.radiocsirt.org/vuln/ghsa-cw6w-5gqc-jh8j <p>An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive &#34;shell&#34; that isn&#39;t limited to the commands specified in hawk_invoke, allowing escalation to root.</p> <p>An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive &#34;shell&#34; that isn&#39;t limited to the commands specified in hawk_invoke, allowing escalation to root.</p> https://cve.radiocsirt.org/vuln/ghsa-cw6w-5gqc-jh8j https://cve.radiocsirt.org/vuln/gsd-2021-3020 gsd-2021-3020 https://cve.radiocsirt.org/vuln/gsd-2021-3020