1 matches found
MGASA-2021-0049 Updated crmsh packages fix security vulnerability
The crm configure and hbreport commands failed to sanitize sensitive information by default bsc1163581. An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" when "crm" is run were able to execute commands via shell code injection to the crm histor...
7.5CVSS8.1AI score0.00954EPSS
SaveExploits0References4
20