CVE-2022-2735CWE-276

A vulnerability was found in the PCS project

published September 6, 2022

CVSS
—
EPSS
0%
Percentile
23.2
In the wild
Unconfirmed
What it is

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00315 · 23.2th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-09-06T17:18Z
EPSS history
Timeline
  • 06 SEP 17:18Z
    A vulnerability was found in the PCS project
    cvelistv5