14 lines
900 B
JSON
14 lines
900 B
JSON
{
|
|
"id": "openEuler-SA-2022-1886",
|
|
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2022-1886",
|
|
"title": "An update for pcs is now available for openEuler-20.03-LTS-SP1,openEuler-20.03-LTS-SP3 and openEuler-22.03-LTS",
|
|
"severity": "High",
|
|
"description": "pcs is a corosync and pacemaker configuration tool. It permits users to easily view, modify and create pacemaker based clusters.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.(CVE-2022-1049)",
|
|
"cves": [
|
|
{
|
|
"id": "CVE-2022-1049",
|
|
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-1049",
|
|
"severity": "High"
|
|
}
|
|
]
|
|
} |