CVE-2021-3020 - CVE House
Back to Database
Status published High CVE-2021-3020

An issue was discovered in ClusterLabs Hawk (aka HA Web...

Vulnerability Description

An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive "shell" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-3020

Credits & Attribution

No credits recorded in the NVD database.

References

More from clusterlabs

View All →
CVE-2020-35459
An issue was discovered in ClusterLabs crmsh through 4.2.1. Local...
High 7.8
CVE-2020-35458
An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x....
Critical 9.8
CVE-2019-12779
libqb before 1.0.5 allows local users to overwrite arbitrary files...
High 7.1
CVE-2016-7797
Pacemaker before 1.1.15, when using pacemaker remote, might allow remote...
High 7.5
CVE-2016-0721
Session fixation vulnerability in pcsd in pcs before 0.9.157....
High 8.1

Affected Vendor

clusterlabs

View all reports →

Affected Software

hawk
Vulnerable Versions:
0

Timeline

Official Publish: August 25th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.