Homepage
About Snyk

crmsh@2.2.1 vulnerabilities

Command-line interface for High-Availability cluster management

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the crmsh package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Command Injection

crmsh is a Command-line interface for High-Availability cluster management

Affected versions of this package are vulnerable to Command Injection. Local attackers able to call crm history (when crm is run) are able to execute commands via shell code injection to the crm history command line, potentially allowing escalation of privileges.

How to fix Command Injection?

A fix was pushed into the master branch but not yet published.

[0,)
Go back to all versions of this package