CVE-2022-2735
CVE-2022-2735
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
06 sep 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.
Productos afectados
n/a · ClusterLabs/pcs¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →