CVE-2022-1049CWE-287

A flaw was found in the Pacemaker configuration tool (pcs)

published March 25, 2022

CVSS
—
EPSS
2%
Percentile
80.2
In the wild
Unconfirmed
What it is

A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01969 · 80.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-03-25T18:03Z
EPSS history
Timeline
  • 25 MAR 18:03Z
    A flaw was found in the Pacemaker configuration tool (pcs)
    cvelistv5