CVE-2022-2553CWE-287

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node

published July 28, 2022

CVSS
—
EPSS
1%
Percentile
70.5
In the wild
Unconfirmed
What it is

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01313 · 70.5th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-07-28T00:00Z
EPSS history
Timeline
  • 28 JUL 00:00Z
    The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node
    cvelistv5