Clusterlabs

Hawk

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2021-3020

  • EPSS 0.11%
  • Published 26.08.2022 00:15:08
  • Last modified 21.11.2024 06:20:46

An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as...

10

CVE-2020-35458

  • EPSS 12.99%
  • Published 12.01.2021 15:15:13
  • Last modified 21.11.2024 05:27:19

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attacke...