The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 07:01
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/ClusterLabs/booth/commit/35bf0b7b048d715f671eb68974fb6b4af6528c67 - Patch, Third Party Advisory | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4T4TTXAABVUCMPUL7XQ2PH5EYYOOQZY/ - | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHDOFX7NQFH3UGZZA3SGW5SVMDDHIUVD/ - | |
References | () https://www.debian.org/security/2022/dsa-5194 - Third Party Advisory |
07 Nov 2023, 03:46
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2022-07-28 15:15
Updated : 2024-11-21 07:01
NVD link : CVE-2022-2553
Mitre link : CVE-2022-2553
CVE.ORG link : CVE-2022-2553
JSON object : View
Products Affected
fedoraproject
- fedora
debian
- debian_linux
clusterlabs
- booth
CWE
CWE-287
Improper Authentication