CVE-2020-35459

An issue was discovered in ClusterLabs crmsh through 4.2.1

published January 12, 2021

CVSS
—
EPSS
1%
Percentile
52.2
In the wild
Unconfirmed
What it is

An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00689 · 52.2th percentile
Published
2021-01-12T14:32Z
EPSS history
Timeline
  • 12 JAN 14:32Z
    An issue was discovered in ClusterLabs crmsh through 4.2.1
    cvelistv5