Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-1049

Date: March 25, 2022

A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.

Language: Python

Severity Score

Related Resources (12)

https://access.redhat.com/errata/RHSA-2022:7447
https://people.canonical.com/~ubuntu-security/cve/CVE-2022-1049
https://access.redhat.com/security/cve/CVE-2022-1049
https://access.redhat.com/errata/RHSA-2022:7935
https://security-tracker.debian.org/tracker/CVE-2022-1049
https://www.debian.org/security/2022/dsa-5226
https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5/
https://nvd.nist.gov/vuln/detail/CVE-2022-1049
https://bugzilla.redhat.com/show_bug.cgi?id=2066629
https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5
https://lists.debian.org/debian-lts-announce/2022/09/msg00017.html
https://www.mend.io/vulnerability-database/CVE-2022-1049

Severity Score

Weakness Type (CWE)

Authentication Issues

CWE-287

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): HIGH
Integrity (I): HIGH
Availability (A): HIGH

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): PARTIAL
Integrity (I): PARTIAL
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us