CVE-2020-35458 – An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell cod …

Vuln ID: CVE-2020-35458

Published:  2021-01-12  15:15:13Z

Description: An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser.

Source: NVD.NIST.GOV