CVE-2022-2735: clusterlabs pcs Incorrect Default Permissions
Vulnerability summary
CVE-2022-2735 is a high (CVSS 7.8) Incorrect Default Permissions vulnerability in clusterlabs pcs. EPSS estimates a 0.32% chance of exploitation in the next 30 days, higher than 24.8% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 06-09-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw allows an attacker to have complete control over the cluster managed by PCS.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · Red hatEcosystem advisory · calculated8.4HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.32%
Chance of exploitation in the next 30 days
Percentile
25%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.32% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- pcs< 0.11.3-2
- debian_linuxEOL11.0
Redhat2 products
- pcs< 0:0.10.8-1.el8_4.2 | < 0:0.11.1-10.el9_0.2 | < 0:0.10.12-6.el8_6.2 | < 0:0.10.4-6.el8_2.3
- pcs-snmp< 0:0.10.8-1.el8_4.2 | < 0:0.11.1-10.el9_0.2 | < 0:0.10.12-6.el8_6.2 | < 0:0.10.4-6.el8_2.3
Clusterlabs1 product
- pcs≥ 0.10.5, ≤ 0.11.3
Ubuntu1 product
- pcs< 0.9.149-1ubuntu1.1+esm1 | < 0.10.11-2ubuntu3+esm1
4 vendors · 6 products
References
22 links- bugzilla.redhat.com/show_bug.cgi?id=2116815X Refsource MISCREPORTIssue TrackingPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2022/09/01/4X Refsource MISCARTICLEREPORTMailing ListRelease NotesThird Party Advisory
