CVE-2020-35458

Published: 2021-01-12T15:15Z

Last Modified: 2024-11-21T05:27Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt