CVE-2022-1049
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login...
Original description
The description as published by the source.
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2022-1049 pcs Fixed in: 0.10.8-1+deb11u1
- Ubuntu UBUNTU-CVE-2022-1049 pcs Fixed in: 0.10.11-2ubuntu3+esm1
References
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- web huntr.dev
- web lists.debian.org