Vulnerabilities > CVE-2022-1049

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

clusterlabs

debian

NVD

Published: 2022-03-25

Updated: 2024-11-21

Summary

A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.

Vulnerable Configurations

Part	Description	Count
Application	Clusterlabs Clusterlabs PCS 0.9.2 Clusterlabs PCS 0.9.3 Clusterlabs PCS 0.9.3.1 Clusterlabs PCS 0.9.4 Clusterlabs PCS 0.9.5 Clusterlabs PCS 0.9.6 Clusterlabs PCS 0.9.7 Clusterlabs PCS 0.9.8 Clusterlabs PCS 0.9.9 Clusterlabs PCS 0.9.30 Clusterlabs PCS 0.9.31 Clusterlabs PCS 0.9.32 Clusterlabs PCS 0.9.34 Clusterlabs PCS 0.9.35 Clusterlabs PCS 0.9.36 Clusterlabs PCS 0.9.37 Clusterlabs PCS 0.9.38 Clusterlabs PCS 0.9.39 Clusterlabs PCS 0.9.40 Clusterlabs PCS 0.9.41 Clusterlabs PCS 0.9.42 Clusterlabs PCS 0.9.43 Clusterlabs PCS 0.9.44 Clusterlabs PCS 0.9.45 Clusterlabs PCS 0.9.46 Clusterlabs PCS 0.9.47 Clusterlabs PCS 0.9.48 Clusterlabs PCS 0.9.49 Clusterlabs PCS 0.9.50 Clusterlabs PCS 0.9.51 Clusterlabs PCS 0.9.52 Clusterlabs PCS 0.9.53 Clusterlabs PCS 0.9.54 Clusterlabs PCS 0.9.55 Clusterlabs PCS 0.9.56 Clusterlabs PCS 0.9.57 Clusterlabs PCS 0.9.58 Clusterlabs PCS 0.9.59 Clusterlabs PCS 0.9.60 Clusterlabs PCS 0.9.61 Clusterlabs PCS 0.9.62 Clusterlabs PCS 0.9.63 Clusterlabs PCS 0.9.64 Clusterlabs PCS 0.9.65 Clusterlabs PCS 0.9.66 Clusterlabs PCS 0.9.67 Clusterlabs PCS 0.9.68 Clusterlabs PCS 0.9.69 Clusterlabs PCS 0.9.70 Clusterlabs PCS 0.9.71 Clusterlabs PCS 0.9.72 Clusterlabs PCS 0.9.73 Clusterlabs PCS 0.9.74 Clusterlabs PCS 0.9.75 Clusterlabs PCS 0.9.76 Clusterlabs PCS 0.9.77 Clusterlabs PCS 0.9.78 Clusterlabs PCS 0.9.79 Clusterlabs PCS 0.9.80 Clusterlabs PCS 0.9.81 Clusterlabs PCS 0.9.82 Clusterlabs PCS 0.9.83 Clusterlabs PCS 0.9.84 Clusterlabs PCS 0.9.85 Clusterlabs PCS 0.9.86 Clusterlabs PCS 0.9.87 Clusterlabs PCS 0.9.88 Clusterlabs PCS 0.9.89 Clusterlabs PCS 0.9.90 Clusterlabs PCS 0.9.91 Clusterlabs PCS 0.9.92 Clusterlabs PCS 0.9.93 Clusterlabs PCS 0.9.94 Clusterlabs PCS 0.9.95 Clusterlabs PCS 0.9.96 Clusterlabs PCS 0.9.97 Clusterlabs PCS 0.9.98 Clusterlabs PCS 0.9.99 Clusterlabs PCS 0.9.100 Clusterlabs PCS 0.9.101 Clusterlabs PCS 0.9.102 Clusterlabs PCS 0.9.103 Clusterlabs PCS 0.9.104 Clusterlabs PCS 0.9.105 Clusterlabs PCS 0.9.106 Clusterlabs PCS 0.9.107 Clusterlabs PCS 0.9.108 Clusterlabs PCS 0.9.109 Clusterlabs PCS 0.9.110 Clusterlabs PCS 0.9.111 Clusterlabs PCS 0.9.112 Clusterlabs PCS 0.9.113 Clusterlabs PCS 0.9.114 Clusterlabs PCS 0.9.115 Clusterlabs PCS 0.9.116 Clusterlabs PCS 0.9.117 Clusterlabs PCS 0.9.118 Clusterlabs PCS 0.9.119 Clusterlabs PCS 0.9.120 Clusterlabs PCS 0.9.121 Clusterlabs PCS 0.9.122 Clusterlabs PCS 0.9.123 Clusterlabs PCS 0.9.124 Clusterlabs PCS 0.9.125 Clusterlabs PCS 0.9.126 Clusterlabs PCS 0.9.127 Clusterlabs PCS 0.9.128 Clusterlabs PCS 0.9.129 Clusterlabs PCS 0.9.130 Clusterlabs PCS 0.9.131 Clusterlabs PCS 0.9.132 Clusterlabs PCS 0.9.134 Clusterlabs PCS 0.9.135 Clusterlabs PCS 0.9.136 Clusterlabs PCS 0.9.137 Clusterlabs PCS 0.9.138 Clusterlabs PCS 0.9.139 Clusterlabs PCS 0.9.140 Clusterlabs PCS 0.9.141 Clusterlabs PCS 0.9.142 Clusterlabs PCS 0.9.143 Clusterlabs PCS 0.9.144 Clusterlabs PCS 0.9.145 Clusterlabs PCS 0.9.146 Clusterlabs PCS 0.9.147 Clusterlabs PCS 0.9.148 Clusterlabs PCS 0.9.149 Clusterlabs PCS 0.9.150 Clusterlabs PCS 0.9.151 Clusterlabs PCS 0.9.152 Clusterlabs PCS 0.9.153 Clusterlabs PCS 0.9.154 Clusterlabs PCS 0.9.155 Clusterlabs PCS 0.9.156 Clusterlabs PCS 0.9.157 Clusterlabs PCS 0.9.158 Clusterlabs PCS 0.9.159 Clusterlabs PCS 0.9.160 Clusterlabs PCS 0.9.161 Clusterlabs PCS 0.9.162 Clusterlabs PCS 0.9.163 Clusterlabs PCS 0.9.164 Clusterlabs PCS 0.9.165 Clusterlabs PCS 0.9.166 Clusterlabs PCS 0.9.167 Clusterlabs PCS 0.10.1 Clusterlabs PCS 0.10.2 Clusterlabs PCS 0.10.3 Clusterlabs PCS 0.10.4 Clusterlabs PCS 0.10.5 Clusterlabs PCS 0.10.6 Clusterlabs PCS 0.10.7 Clusterlabs PCS 0.10.8 Clusterlabs PCS 0.10.9 Clusterlabs PCS 0.10.10 Clusterlabs PCS 0.10.11 Clusterlabs PCS 0.10.12 Clusterlabs PCS 0.10.13 Clusterlabs PCS 0.10.14 Clusterlabs PCS 0.11.1 Clusterlabs PCS 0.11.2	162
OS	Debian Debian Debian Linux 10.0 Debian Debian Linux 11.0	2

Vulnerabilities > CVE-2022-1049 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2022-1049"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2022-1049