CVE-2021-3020 Privilege escalation in n/a
A local attacker with hacluster user access can exploit a setuid binary to execute arbitrary commands as root, achieving full system privilege escalation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-3020?
CVE-2021-3020 is a high-severity vulnerability in n/a, published on 25 Aug 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive "shell" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root.
Weakness: CWE-269
Which versions are affected by CVE-2021-3020?
It affects 1 product.
Products include Clusterlabs Hawk.
How do I fix CVE-2021-3020?
Apply the vendor's patch.
Is CVE-2021-3020 being exploited?
There is no known exploitation of CVE-2021-3020 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cw6w-5gqc-jh8j, MGASA-2023-0073.