Vulnerability · Published Sep 6, 2022 · Assigned by redhat
CVE-2022-2735
High 7.8
In plain English
A high-severity incorrect default permissions in ClusterLabs/pcs. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | pcs | 0.10.12-6.el8_6.2.alma | ALSA-2022:6314 |
| AlmaLinux:9 | pcs | 0.11.1-10.el9_0.2 | ALSA-2022:6313 |
| AlmaLinux:8 | pcs-snmp | 0.10.12-6.el8_6.2.alma | ALSA-2022:6314 |
| AlmaLinux:9 | pcs-snmp | 0.11.1-10.el9_0.2 | ALSA-2022:6313 |
| Debian:12 | pcs | 0.11.3-2 | DEBIAN-CVE-2022-2735 |
| Debian:13 | pcs | 0.11.3-2 | DEBIAN-CVE-2022-2735 |
| Debian:14 | pcs | 0.11.3-2 | DEBIAN-CVE-2022-2735 |
| Rocky Linux:8 | pcs | 0:0.10.12-6.el8_6.2 | RLSA-2022:6314 |
| Rocky Linux:9 | pcs | 0:0.11.1-10.el9_0.2 | RLSA-2022:6313 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ClusterLabs/pcs | Affects v0.10.5 and later including all 0.11.x. |
Weakness: CWE-276
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2116815 x_refsource_MISC
- https://www.openwall.com/lists/oss-security/2022/09/01/4 x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2022-2735 x_refsource_MISC
- DSA-5226 vendor-advisory, x_refsource_DEBIAN