{"id":"CVE-2022-1049","aliases":["ALSA-2022:7447","ALSA-2022:7935","CLSA-2026-1790610952","CLSA-2026-1790611274","DEBIAN-CVE-2022-1049","DLA-3108-1","DSA-5226-1","EUVD-2022-24396","GHSA-hhh9-rwf2-2pp5","OESA-2022-1886","RHSA-2022:7447","RHSA-2022:7935","RLSA-2022:7447","RLSA-2022:7935","UBUNTU-CVE-2022-1049","USN-7614-1"],"status":"published","title":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired...","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01969,"percentile":0.80541,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2022-03-25T18:03:01Z","modified":"2026-11-03T08:02:07Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"pcs","fixed_in":["0.10.14-5.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"pcs-snmp","fixed_in":["0.10.14-5.el8.alma"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pcs","fixed_in":["0.11.3-4.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"pcs-snmp","fixed_in":["0.11.3-4.el9"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"pcs","fixed_in":["0.11.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pcs","fixed_in":["0.11.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pcs","fixed_in":["0.11.3-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"pcs","fixed_in":["0.10.1-2+deb10u1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"pcs","fixed_in":["0.10.5-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"pcs","fixed_in":["0.10.5-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"pcs","fixed_in":["0.10.8-3.oe2203"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"pcs","fixed_in":["0:0.10.14-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"pcs-snmp","fixed_in":["0:0.10.14-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"pcs","fixed_in":["0:0.10.14-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"pcs-snmp","fixed_in":["0:0.10.14-5.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"pcs","fixed_in":["0:0.11.3-4.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"pcs-snmp","fixed_in":["0:0.11.3-4.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"pcs","fixed_in":["0:0.11.3-4.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"pcs-snmp","fixed_in":["0:0.11.3-4.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"pcs","fixed_in":["0:0.10.14-5.el8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"pcs","fixed_in":["0:0.11.3-4.el9_1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pcs","fixed_in":["0.10.11-2ubuntu3+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.14-5.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.14-5.el8.alma"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-4.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-4.el9"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-1.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-1.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-1.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-1.el8.tuxcare.els2"}]}],"bundled":7},{"source":"osv","ecosystem":"Debian:12","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.3-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.1-2+deb10u1"}]}],"versions":["0.10.1-2"]},{"source":"osv","ecosystem":"Debian:11","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-1+deb11u1"}]}],"versions":["0.10.8-1"],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.5-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.8-3.oe2203"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.14-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.14-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.14-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.14-5.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.3-4.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.3-4.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.3-4.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.3-4.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.10.14-5.el8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.3-4.el9_1.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.11-2ubuntu3+esm1"}]}],"versions":["0.10.8-1ubuntu1","0.10.11-2ubuntu2","0.10.11-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.149-1ubuntu1.1+esm1"}]}],"versions":["0.9.149-1","0.9.149-1ubuntu1","0.9.149-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-3ubuntu0.1~esm1"}]}],"versions":["0.10.2-1","0.10.4-2","0.10.4-2ubuntu1","0.10.4-3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.11-2ubuntu3+esm1"}]}],"versions":["0.10.8-1ubuntu1","0.10.11-2ubuntu2","0.10.11-2ubuntu3"],"bundled":4}],"products":[{"vendor":"clusterlabs","product":"pcs"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","web"]},{"url":"https://www.debian.org/security/2022/dsa-5226","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/09/msg00017.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1049","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7447","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7935","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1049","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066629","tags":["report"]},{"url":"https://huntr.dev/bounties/7aa921fc-a568-4fd8-96f4-7cd826246aa5/","tags":["article"]},{"url":"https://github.com/advisories/GHSA-hhh9-rwf2-2pp5"},{"url":"https://bugzilla.redhat.com/2066629","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-7447.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-7935.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1790610952.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38900","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45442","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27530","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27539","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-52804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47287","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1790611274.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1049.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-1049","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1886","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1730232","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1791670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1909904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2023845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117650","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7447.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1049","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1301204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2039884","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2054671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2058252","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059142","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059145","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059148","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059149","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059177","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2059501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2095695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102663","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7935.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7447","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:7935","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-1049","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7614-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-2661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1086","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2735","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-1049","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","status":"published","published":"2022-03-25T18:03:01Z","modified":"2024-08-02T23:47:43.257Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:34:38.263045Z"}],"euvd":[{"id":"EUVD-2022-24396","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","status":"published","published":"2022-03-25T18:03:01Z","modified":"2024-08-02T23:47:43Z","updated_at":"2026-11-03T03:26:03.022972Z"}],"ghsa":[{"id":"GHSA-hhh9-rwf2-2pp5","title":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired...","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","status":"published","published":"2022-03-26T00:00:28Z","modified":"2023-02-10T05:05:58Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:54:00.189984Z"}],"nvd":[{"id":"CVE-2022-1049","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","status":"published","published":"2022-03-25T19:15:10.577Z","modified":"2026-06-17T04:21:43.93Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:14.24948Z"}],"osv":[{"id":"DEBIAN-CVE-2022-1049","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","status":"published","published":"2022-03-25T19:15:10.577Z","modified":"2026-11-03T08:02:07.961900873Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:24:50.542442Z"},{"id":"OESA-2022-1886","title":"pcs security update","description":"pcs is a corosync and pacemaker configuration tool.  It permits users to easily view, modify and create pacemaker based clusters.\r\n\r\nSecurity Fix(es):\r\n\r\nA flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.(CVE-2022-1049)","status":"published","published":"2022-09-02T11:05:09Z","modified":"2026-08-18T01:17:16.804292727Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"RHSA-2022:7447","title":"Red Hat Security Advisory: pcs security, bug fix, and enhancement update","status":"published","published":"2024-09-13T17:40:52Z","modified":"2026-06-29T10:44:03Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:7935","title":"Red Hat Security Advisory: pcs security, bug fix, and enhancement update","status":"published","published":"2024-09-13T17:41:24Z","modified":"2026-06-29T10:44:18Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:7447","title":"Moderate: pcs security, bug fix, and enhancement update","description":"The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* pcs: improper authentication via PAM (CVE-2022-1049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.7 Release Notes linked from the References section.","status":"published","published":"2022-11-08T06:19:58Z","modified":"2026-02-04T14:45:04.547638Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"RLSA-2022:7935","title":"Moderate: pcs security, bug fix, and enhancement update","description":"The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* pcs: improper authentication via PAM (CVE-2022-1049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.1 Release Notes linked from the References section.","status":"published","published":"2022-11-15T06:11:42Z","modified":"2026-02-04T20:30:11.250837Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-1049","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","status":"published","published":"2022-03-25T19:15:00Z","modified":"2026-07-22T20:46:34.900621274Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"ALSA-2022:7447","title":"Moderate: pcs security, bug fix, and enhancement update","description":"The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* pcs: improper authentication via PAM (CVE-2022-1049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-08T00:00:00Z","modified":"2026-10-29T11:01:49.470493025Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:7935","title":"Moderate: pcs security, bug fix, and enhancement update","description":"The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.\n\nSecurity Fix(es):\n\n* pcs: improper authentication via PAM (CVE-2022-1049)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2022-11-15T00:00:00Z","modified":"2026-10-29T11:31:17.392532797Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CLSA-2026-1790610952","title":"pcs: Fix of 7 CVEs","description":"- CVE-2022-1049: fix pcsd PAM auth accepting expired accounts and passwords\n- CVE-2022-38900: fix DoS in decode() of bundled decode-uri-component\n- CVE-2022-45442: fix reflected file download in bundled sinatra attachment()\n- CVE-2023-27530: fix multipart part count DoS in rack (via rack 2.2.20)\n- CVE-2023-27539: fix ReDoS in rack header parsing (via rack 2.2.20)\n- CVE-2024-52804: fix quadratic cookie parsing in bundled tornado\n- CVE-2025-47287: fix multipart parser log flooding DoS in bundled tornado","status":"published","published":"2026-09-28T15:56:09Z","modified":"2026-10-26T09:31:44.061169655Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CLSA-2026-1790611274","title":"pcs: Fix of 7 CVEs","description":"- CVE-2022-1049: fix pcsd PAM auth accepting expired accounts and passwords\n- CVE-2022-38900: fix DoS in decode() of bundled decode-uri-component\n- CVE-2022-45442: fix reflected file download in bundled sinatra attachment()\n- CVE-2023-27530: fix multipart part count DoS in rack (via rack 2.2.20)\n- CVE-2023-27539: fix ReDoS in rack header parsing (via rack 2.2.20)\n- CVE-2024-52804: fix quadratic cookie parsing in bundled tornado\n- CVE-2025-47287: fix multipart parser log flooding DoS in bundled tornado","status":"published","published":"2026-09-28T16:01:31Z","modified":"2026-10-26T09:31:51.368414759Z","updated_at":"2026-11-02T15:43:48.65893Z"},{"id":"CVE-2022-1049","description":"A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","status":"published","published":"2022-03-25T18:03:01Z","modified":"2026-10-28T02:30:25.450691675Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:44:23.245966Z"},{"id":"DLA-3108-1","title":"pcs - security update","status":"published","published":"2022-09-14T00:00:00Z","modified":"2026-03-09T01:20:18.857285Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5226-1","title":"pcs - security update","status":"published","published":"2022-09-06T00:00:00Z","modified":"2026-03-09T02:09:08.948317Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"USN-7614-1","title":"pcs vulnerabilities","description":"Cedric Buissart discovered that pcs did not correctly handle certain\nparameters. An attacker could possibly use this issue to leak sensitive\ninformation or elevate their privileges. This issue only affected\nUbuntu 16.04 LTS. (CVE-2018-1086)\n\nOndrej Mular discovered that pcs did not correctly handle Unix socket\npermissions. An attacker could possibly use this issue to elevate their\nprivileges. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-2735)\n\nIt was discovered that pcs did not correctly handle PAM authentication.\nAn attacker could possibly use this issue to bypass authentication\nmechanisms. This issue only affected Ubuntu 20.04 LTS and \nUbuntu 22.04 LTS. (CVE-2022-1049)\n\nIt was discovered that pcs did not correctly handle the validation of\nNode names. An attacker could possibly use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected\nUbuntu 16.04 LTS. (CVE-2017-2661)","status":"published","published":"2025-07-02T08:20:20Z","modified":"2026-06-25T13:32:30.540071415Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}