Clusterlabs ≫ Crmsh

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

7.8

CVE-2020-35459

Exploit

EPSS 0.05%
Published 12.01.2021 15:15:13
Last modified 21.11.2024 05:27:19

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privi...