Homepage

crmsh@2.2.1 vulnerabilities

Command-line interface for High-Availability cluster management

  • latest version

    2.2.1

  • first published

    9 years ago

  • latest version published

    9 years ago

  • licenses detected

  • View crmsh package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the crmsh package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Command Injection

    crmsh is a Command-line interface for High-Availability cluster management

    Affected versions of this package are vulnerable to Command Injection. Local attackers able to call crm history (when crm is run) are able to execute commands via shell code injection to the crm history command line, potentially allowing escalation of privileges.

    How to fix Command Injection?

    A fix was pushed into the master branch but not yet published.

    [0,)
    Go back to all versions of this package