{"id":"CVE-2022-2553","aliases":["ALSA-2022:6439","ALSA-2022:6580","AZL-25645","AZL-36933","DEBIAN-CVE-2022-2553","DSA-5194-1","EUVD-2022-34807","GHSA-9ppf-2r5r-2chh","RHSA-2022:6250","RHSA-2022:6439","RHSA-2022:6580","RLSA-2022:6439","SUSE-SU-2022:2605-1","SUSE-SU-2022:2606-1","SUSE-SU-2022:2607-1","SUSE-SU-2022:2608-1","SUSE-SU-2022:2609-1","UBUNTU-CVE-2022-2553","USN-5556-1","openSUSE-SU-2024:12315-1"],"status":"published","title":"The authfile directive in the booth config file is ignored, preventing use of authentication in...","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01313,"percentile":0.70902,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287"],"published":"2022-07-28T00:00:00Z","modified":"2026-10-29T11:31:14Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"booth","fixed_in":["1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-arbitrator","fixed_in":["1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-core","fixed_in":["1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-site","fixed_in":["1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"booth-test","fixed_in":["1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth","fixed_in":["1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-arbitrator","fixed_in":["1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-core","fixed_in":["1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-site","fixed_in":["1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"booth-test","fixed_in":["1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"booth","fixed_in":["1.0-8"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"booth","fixed_in":["1.0-8"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"booth","fixed_in":["1.0-268-gdce51f9-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"booth","fixed_in":["1.0-268-gdce51f9-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"booth","fixed_in":["1.0-268-gdce51f9-1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"booth","fixed_in":["1.0-162-g27f917f-2+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"booth","fixed_in":["1.0-237-gdd88847-2+deb11u1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-site","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-test","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-arbitrator","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core-debuginfo","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-debugsource","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-site","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-test","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-arbitrator","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core-debuginfo","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-debugsource","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-site","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-test","fixed_in":["0:1.0-251.3.bfb2f92.git.el9_0.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"booth","fixed_in":["0:1.0-199.1.ac1d34c.git.el8_6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability GEO Extension 12 SP4","package":"booth","fixed_in":["1.0-42.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability GEO Extension 12 SP5","package":"booth","fixed_in":["1.0-42.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"booth","fixed_in":["1.0-150100.11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"booth","fixed_in":["1.0-150100.11.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"booth","fixed_in":["1.0-150000.6.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"booth","fixed_in":["1.0-150300.18.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"booth","fixed_in":["1.0-150300.18.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"booth","fixed_in":["1.0+20210519.bfb2f92-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"booth","fixed_in":["1.0+20210519.bfb2f92-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"booth","fixed_in":["1.0-174-gce9f821-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"booth","fixed_in":["1.0-237-gdd88847-4ubuntu2.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"booth","fixed_in":["1.0+20220724.dce51f9-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-8"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-8"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-268-gdce51f9-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-268-gdce51f9-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-268-gdce51f9-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-162-g27f917f-2+deb10u1"}]}],"versions":["1.0-162-g27f917f-2"]},{"source":"osv","ecosystem":"Debian:11","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-237-gdd88847-2+deb11u1"}]}],"versions":["1.0-237-gdd88847-2"]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.4::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::highavailability","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-arbitrator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-core-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-site","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::resilientstorage","package":"booth-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-251.3.bfb2f92.git.el9_0.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0-199.1.ac1d34c.git.el8_6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability GEO Extension 12 SP4","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-42.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability GEO Extension 12 SP5","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-42.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150100.11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150100.11.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150000.6.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150300.18.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-150300.18.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+20210519.bfb2f92-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+20210519.bfb2f92-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-174-gce9f821-1ubuntu0.2"}]}],"versions":["1.0-162-g27f917f-2","1.0-174-gce9f821-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-237-gdd88847-4ubuntu2.2"}]}],"versions":["1.0-237-gdd88847-2","1.0-237-gdd88847-4ubuntu1","1.0-237-gdd88847-4ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2-2ubuntu1","1.2-2ubuntu2","1.2-3ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-174-gce9f821-1ubuntu0.2"}]}],"versions":["1.0-162-g27f917f-2","1.0-174-gce9f821-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-237-gdd88847-4ubuntu2.2"}]}],"versions":["1.0-237-gdd88847-2","1.0-237-gdd88847-4ubuntu1","1.0-237-gdd88847-4ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"booth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0+20220724.dce51f9-1.1"}]}]}],"products":[{"vendor":"clusterlabs","product":"booth"},{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"microsoft","product":"booth"}],"references":[{"url":"https://github.com/ClusterLabs/booth/commit/35bf0b7b048d715f671eb68974fb6b4af6528c67","tags":["x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://www.debian.org/security/2022/dsa-5194","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J4T4TTXAABVUCMPUL7XQ2PH5EYYOOQZY/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OHDOFX7NQFH3UGZZA3SGW5SVMDDHIUVD/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2553","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J4T4TTXAABVUCMPUL7XQ2PH5EYYOOQZY/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OHDOFX7NQFH3UGZZA3SGW5SVMDDHIUVD/"},{"url":"https://github.com/advisories/GHSA-9ppf-2r5r-2chh"},{"url":"https://access.redhat.com/errata/RHSA-2022:6439","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2553","tags":["report"]},{"url":"https://bugzilla.redhat.com/2109251","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2022-6439.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6580","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2022-6580.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2553.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2553","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6250","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109251","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6250.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2553","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6439.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6580.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2022:6439","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222605-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201946","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-2553","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222606-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222607-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222608-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222609-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2553","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5556-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-2553","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T00:00:00Z","modified":"2024-08-03T00:39:08.049Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-34807","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T00:00:00Z","modified":"2024-08-03T00:39:08Z","updated_at":"2026-11-03T03:25:57.932023Z"}],"ghsa":[{"id":"GHSA-9ppf-2r5r-2chh","title":"The authfile directive in the booth config file is ignored, preventing use of authentication in...","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-29T00:00:32Z","modified":"2023-01-29T05:00:50Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:44:40.694561Z"}],"nvd":[{"id":"CVE-2022-2553","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T15:15:07.663Z","modified":"2026-06-17T04:42:06.473Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:24.037422Z"}],"osv":[{"id":"AZL-25645","title":"CVE-2022-2553 affecting package booth for versions less than 1.0-8","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T15:15:07Z","modified":"2026-04-21T04:23:10.201768Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"AZL-36933","title":"CVE-2022-2553 affecting package booth for versions less than 1.0-8","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T15:15:07Z","modified":"2026-04-21T04:33:10.319657Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"DEBIAN-CVE-2022-2553","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T15:15:07.663Z","modified":"2026-11-03T08:02:46.373699454Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T08:24:39.643572Z"},{"id":"RHSA-2022:6250","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T23:19:52Z","modified":"2026-06-29T10:42:51Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6439","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T23:20:13Z","modified":"2026-06-29T10:43:00Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6580","title":"Red Hat Security Advisory: booth security update","status":"published","published":"2024-09-13T23:19:28Z","modified":"2026-06-29T10:43:10Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RLSA-2022:6439","title":"Moderate: booth security update","description":"The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.\n\nSecurity Fix(es):\n\n* booth: authfile directive in booth config file is completely ignored. (CVE-2022-2553)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-13T07:36:36Z","modified":"2026-02-04T14:15:12.57709Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"UBUNTU-CVE-2022-2553","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T15:15:00Z","modified":"2026-09-25T17:45:09.198013666Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"ALSA-2022:6439","title":"Moderate: booth security update","description":"The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.\n\nSecurity Fix(es):\n\n* booth: authfile directive in booth config file is completely ignored. (CVE-2022-2553)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-13T00:00:00Z","modified":"2026-10-29T11:01:18.957754103Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"ALSA-2022:6580","title":"Moderate: booth security update","description":"The Booth cluster ticket manager is a component to bridge high availability clusters spanning multiple sites, in particular, to provide decision inputs to local Pacemaker cluster resource managers. It operates as a distributed consensus-based service, presumably on a separate physical network. Tickets facilitated by a Booth formation are the units of authorization that can be bound to certain resources. This will ensure that the resources are run at only one (granted) site at a time.\n\nSecurity Fix(es):\n\n* booth: authfile directive in booth config file is completely ignored. (CVE-2022-2553)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2022-09-20T00:00:00Z","modified":"2026-10-29T11:31:14.198584579Z","updated_at":"2026-11-02T15:27:51.655726Z"},{"id":"CVE-2022-2553","description":"The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.","status":"published","published":"2022-07-28T00:00:00Z","modified":"2026-10-28T10:27:51.875479942Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"DSA-5194-1","title":"booth - security update","status":"published","published":"2022-07-29T00:00:00Z","modified":"2026-03-09T02:10:54.553301Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:12315-1","title":"booth-1.0+20220724.dce51f9-1.1 on GA media","description":"These are all security issues fixed in the booth-1.0+20220724.dce51f9-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:25:11.655967Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:2605-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2022-2553: authfile directive in booth config file is completely ignored (bsc#1201946).\n","status":"published","published":"2022-08-01T07:47:01Z","modified":"2026-02-04T03:11:41.221558Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2606-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2022-2553: authfile directive in booth config file is completely ignored (bsc#1201946).\n","status":"published","published":"2022-08-01T07:47:22Z","modified":"2026-02-04T03:17:41.764298Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2607-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2022-2553: authfile directive in booth config file is completely ignored (bsc#1201946).\n","status":"published","published":"2022-08-01T07:47:34Z","modified":"2026-02-04T02:55:37.502277Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2608-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2022-2553: authfile directive in booth config file is completely ignored (bsc#1201946).\n","status":"published","published":"2022-08-01T07:48:00Z","modified":"2026-02-04T03:44:22.316225Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2609-1","title":"Security update for booth","description":"This update for booth fixes the following issues:\n\n- CVE-2022-2553: authfile directive in booth config file is completely ignored (bsc#1201946).\n","status":"published","published":"2022-08-01T07:48:27Z","modified":"2025-05-02T04:32:55.683476Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-5556-1","title":"booth vulnerability","description":"It was discovered that Booth incorrectly handled user authentication. An\nattacker could use this vulnerability to cause a denial of service.\n","status":"published","published":"2022-08-09T19:36:34Z","modified":"2026-04-27T19:13:50.358005Z","updated_at":"2026-11-02T16:58:16.20937Z"}]}}