Most recent entries from all

ALSA-2022:6313 — Important: pcs security update

Affected: AlmaLinux:9: pcs, AlmaLinux:9: pcs-snmp

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

Security Fix(es):

* pcs: obtaining an authentication token for hacluster user could lead to privilege escalation (CVE-2022-2735)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2022-05554

EUVD-2026-12484

fkie_cve-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

GHSA-7xr9-rmm4-cq6v

gsd-2022-2735

OESA-2022-1961 — pcs security update

Affected: openEuler:20.03-LTS-SP1: pcs, openEuler:20.03-LTS-SP3: pcs, openEuler:22.03-LTS: pcs

Security Fix(es): A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.(CVE-2022-2735)

RHSA-2022:6312 — Red Hat Security Advisory: pcs security update

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

RHSA-2022:6313 — Red Hat Security Advisory: pcs security update

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

UBUNTU-CVE-2022-2735

Affected: Ubuntu:Pro:16.04:LTS: pcs, Ubuntu:Pro:22.04:LTS: pcs

WID-SEC-W-2022-1255 — Red Hat Enterprise Linux (pcs): Schwachstelle ermöglicht Privilegieneskalation

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um seine Privilegien zu erhöhen.