ClusterLabs crmsh 2.2.0 Release Candidate 1

CPE Details

ClusterLabs crmsh 2.2.0 Release Candidate 1
clusterlabs
crmsh
2.2.0
2021-01-14
19h15 +00:00
2021-01-14
19h15 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:clusterlabs:crmsh:2.2.0:rc1:*:*:*:*:*:*

Informations

Vendor

clusterlabs

Product

crmsh

Version

2.2.0

Update

rc1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-35459 2021-01-12 13h32 +00:00 An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to execute commands via shell code injection to the crm history commandline, potentially allowing escalation of privileges.
7.8
High