Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2022-1049

A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.

  • Published: Mar 25, 2022
  • Updated: Apr 14, 2023
  • CVE: CVE-2022-1049
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
clusterlabs / pcs - 0.11.2.x
debian / debian_linux 10.0 10.0.x
debian / debian_linux 11.0 11.0.x