Lucene search
+L

1391 matches found

osv_debian
osv_debian
•added 2022/09/06 6:15 p.m.•12 views

DEBIAN-CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.5AI score0.00315EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/09/06 6:15 p.m.•11 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7AI score0.00315EPSS
SaveExploits0References9
Prion
Prion
•added 2022/09/06 6:15 p.m.•25 views

Privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

4.3CVSS7.7AI score0.00315EPSS
SaveExploits0References4Affected Software2
UbuntuCve
UbuntuCve
•added 2022/09/06 6:15 p.m.•58 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7AI score0.00315EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2022/09/06 6:15 p.m.•11 views

UBUNTU-CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.1AI score0.00315EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2022/09/06 5:18 p.m.•42 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.9AI score0.00315EPSS
SaveExploits0References6
CVE
CVE
•added 2022/09/06 5:18 p.m.•139 views

CVE-2022-2735

CVE-2022-2735 affects the PCS project. The root cause is incorrect permissions on the Unix socket used for internal PCS daemon communication, enabling a privilege escalation by obtaining an authentication token for a hacluster user. With that token, an attacker could gain complete control over th...

7.8CVSS7.7AI score0.00315EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/09/06 5:18 p.m.•47 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

8.1AI score0.00315EPSS
SaveExploits0References4
Mend
Mend
•added 2022/09/06 5:18 p.m.•5 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

8.5CVSS0.00315EPSS
SaveExploits0References12
Debian CVE
Debian CVE
•added 2022/09/06 5:18 p.m.•69 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.8AI score0.00315EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/06 12:00 a.m.•4 views

CVE-2022-2735: Incorrect Default Permissions

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.2AI score0.00315EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2022/09/05 3:21 p.m.•28 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00315EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/09/01 3:19 p.m.•12 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00315EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/09/01 3:18 p.m.•23 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00315EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2022/09/01 3:13 p.m.•21 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00315EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2022/09/01 2:27 p.m.•47 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

8.4CVSS3.7AI score0.00315EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2022/09/01 12:00 a.m.•38 views

Oracle Linux 9 : pcs (ELSA-2022-9753)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9753 advisory. 0.11.1-10.el90.2 - Fixed ruby socket permissions - Resolves: rhbz2116839 Tenable has extracted the preceding description block directly from the Oracle Linux...

7.8CVSS7.5AI score0.00315EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/26 12:00 a.m.•16 views

Ubuntu: Security Advisory (USN-5008-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00443EPSS
SaveExploits0References2
osv_mgasa
osv_mgasa
•added 2022/08/25 9:21 p.m.•20 views

MGASA-2022-0306 Updated canna packages fix security vulnerability

Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. CVE-2022-21950...

5.3CVSS6.5AI score0.0015EPSS
SaveExploits0References3
Mageia
Mageia
•added 2022/08/25 9:21 p.m.•59 views

Updated canna packages fix security vulnerability

Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. CVE-2022-21950...

5.3CVSS4.1AI score0.0015EPSS
SaveExploits0References2
Rows per page
Query Builder