Vendor/product archive

clusterlabs / hawk CVEs

Beta · best-effort

2 CVEs tagged to clusterlabs / hawk — 1 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to clusterlabs vendor archive

CVE-2021-3020

Published Aug 26, 2022

An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setui…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2020-35458

Published Jan 12, 2021

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie.…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1