Red Hat Security Advisory

RHSA-2022:6250

booth security update

Released 2022-08-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux HighAvailability EUS (v.8.4) booth-1.0-199.1.ac1d34c.git.el8_4.1, booth-arbitrator-1.0-199.1.ac1d34c.git.el8_4.1, booth-core-1.0-199.1.ac1d34c.git.el8_4.1 +2
Red Hat Enterprise Linux ResilientStorage EUS (v.8.4) booth-1.0-199.1.ac1d34c.git.el8_4.1, booth-arbitrator-1.0-199.1.ac1d34c.git.el8_4.1, booth-core-1.0-199.1.ac1d34c.git.el8_4.1 +2

TI-2022-02358 CVE-2022-2553 · GHSA-9ppf-2r5r-2chh

LOW 32

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01313 Published 2022-07-28 Partial fix CWE-287