CVE-2022-1049
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-1049 pcs Corrigé dans: 0.10.8-1+deb11u1
- Ubuntu UBUNTU-CVE-2022-1049 pcs Corrigé dans: 0.10.11-2ubuntu3+esm1
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- web huntr.dev
- web lists.debian.org