CVE-2022-1049
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 2.0%
exploitation probability
2.0%top 20% of all CVEs
observed exploitation
nono source reports it
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.
Affected products
n/a · clusterlabs/pcs