csaf2cusa/cusas/p/pcs/pcs-0.10.8-3_openEuler-SA-2022-1886.json
Jia Chao 0b84f3c661 增加测试用的配置和目录
Signed-off-by: Jia Chao <jiac13@chinaunicom.cn>
2024-07-02 15:51:55 +08:00

14 lines
910 B
JSON

{
"id": "openEuler-SA-2022-1886",
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2022-1886",
"title": "An update for pcs is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS",
"severity": "Important",
"description": "pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and create pacemaker based clusters.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.(CVE-2022-1049)",
"cves": [
{
"id": "CVE-2022-1049",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1049",
"severity": "Important"
}
]
}