Lucene search
+L

544 matches found

OSV
OSV
added 2022/09/06 6:15 p.m.1 views

DEBIAN-CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.5AI score0.00299EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2022/09/06 6:15 p.m.47 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7AI score0.00299EPSS
SaveExploits0References3
OSV
OSV
added 2022/09/06 6:15 p.m.2 views

UBUNTU-CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.1AI score0.00299EPSS
SaveExploits0References4
Prion
Prion
added 2022/09/06 6:15 p.m.18 views

Privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

4.3CVSS7.7AI score0.00299EPSS
SaveExploits0References4Affected Software2
Cvelist
Cvelist
added 2022/09/06 5:18 p.m.35 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

8.1AI score0.00299EPSS
SaveExploits0References4
CVE
CVE
added 2022/09/06 5:18 p.m.115 views

CVE-2022-2735

CVE-2022-2735 affects the PCS project. The root cause is incorrect permissions on the Unix socket used for internal PCS daemon communication, enabling a privilege escalation by obtaining an authentication token for a hacluster user. With that token, an attacker could gain complete control over th...

7.8CVSS7.7AI score0.00299EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/09/06 5:18 p.m.28 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.9AI score0.00299EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2022/09/06 5:18 p.m.58 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.8AI score0.00299EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2022/09/05 3:21 p.m.14 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00299EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/09/01 3:19 p.m.4 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00299EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/09/01 3:18 p.m.7 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00299EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2022/09/01 3:13 p.m.8 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00299EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2022/09/01 2:27 p.m.33 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

8.4CVSS3.7AI score0.00299EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/09/01 12:0 a.m.26 views

Oracle Linux 9 : pcs (ELSA-2022-9753)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9753 advisory. 0.11.1-10.el90.2 - Fixed ruby socket permissions - Resolves: rhbz2116839 Tenable has extracted the preceding description block directly from the Oracle Linux...

7.8CVSS7.5AI score0.00299EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.15 views

Ubuntu: Security Advisory (USN-5008-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00453EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/25 9:21 p.m.7 views

MGASA-2022-0306 Updated canna packages fix security vulnerability

Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. CVE-2022-21950...

5.3CVSS6.5AI score0.00142EPSS
SaveExploits0References3
Mageia
Mageia
added 2022/08/25 9:21 p.m.45 views

Updated canna packages fix security vulnerability

Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. CVE-2022-21950...

5.3CVSS4.1AI score0.00142EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/16 7:42 a.m.8 views

OPENSUSE-SU-2022:10091-1 Security update for canna

This update for canna fixes the following issues: - CVE-2022-21950: Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. Use systemd-tmpfiles for cleaning old sockets boo1199280...

5.3CVSS5.2AI score0.00142EPSS
SaveExploits0References3
OSV
OSV
added 2022/08/16 7:42 a.m.8 views

OPENSUSE-SU-2022:10090-1 Security update for canna

This update for canna fixes the following issues: - CVE-2022-21950: move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. Use systemd-tmpfiles for cleaning old sockets boo1199280...

5.3CVSS5.2AI score0.00142EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/08/16 12:0 a.m.3 views

PT-2022-15199 · Canna +2 · Canna +2

Name of the Vulnerable Software and Affected Versions: canna versions prior to canna-3.7p3-bp153.2.3.1 canna versions prior to 3.7p3-bp154.3.3.1 Description: An Improper Access Control issue in the systemd service of canna in openSUSE Backports SLE-15-SP3 and openSUSE Backports SLE-15-SP4 allows...

5.3CVSS4.9AI score0.00142EPSS
SaveExploits0References12
Rows per page
Query Builder