[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAS9eH988AD71ohtbwZhBDkzMwIAL-3FbH4P_Xf3sfj8":3,"g5a-risk:CVE-2021-3020":106},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":26,"epssTimeSeries":30,"severity":31,"affectedProducts":32,"affectedProductsCount":38,"references":39,"referencesCount":55,"weaknesses":56,"weaknessesCount":38,"isActivelyExploited":65,"cisaInfo":26,"otxData":26,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":101,"notableEvents":102},"CVE-2021-3020","What is CVE-2021-3020?","An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools\u002Fhawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive \"shell\" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root.","An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools\u002Fhawk_invoke.c), intended...","2022-08-26T00:15:08.773","2023-08-08T14:22:24.967",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,0.01227,[29,29,29,29,29,29,29],"High",[33],{"vendor":34,"product":35,"version":36,"criteria":37,"vulnerable":4},"clusterlabs","hawk","*","cpe:2.3:a:clusterlabs:hawk:*:*:*:*:*:*:*:*",1,[40,45,51],{"url":41,"source":42,"tags":43},"https:\u002F\u002Fbugzilla.suse.com\u002Fshow_bug.cgi?id=1180571","Suse",[44],"Permissions Required",{"url":46,"source":47,"tags":48},"https:\u002F\u002Fgithub.com\u002FClusterLabs\u002Fcrmsh\u002Fcommit\u002Fc538024b8ebd138dc373b005189471d9b77e9c82","GitHub",[49,50],"Patch","Third Party Advisory",{"url":52,"source":47,"tags":53},"https:\u002F\u002Fgithub.com\u002FClusterLabs\u002Fhawk\u002Freleases",[54,50],"Release Notes",3,[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-269","Improper Privilege Management","The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.","","Draft","Class","Simple",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2021-3020? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-3020, a high severity cyber security vulnerability from 2022. An issue was discovered in ClusterLabs Hawk (aka HA Web Kons...","CVE-2021-3020, CVE-2021-3020 vulnerability, CVE-2021-3020 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, clusterlabs security, hawk vulnerability","\u002Fwhat-is\u002Fcve-2021-3020",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-3020","Cybersecurity","CVE-2021-3020, CVE-2021-3020 vulnerability, CVE-2021-3020 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":26,"Negate":26,"Nodes":94},[95],{"Operator":96,"Negate":26,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":37,"MatchCriteriaID":99,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":100},"BB239D06-C0CE-4BAB-9974-D872E9D3E167","2.3.0-15",[],[],{"lastModified":11,"cacheTime":104,"version":105},1792386866836,"2.0",{"score":107,"band":108,"action":109,"scoredAt":110},48,"Medium","Plan remediation","2026-10-16T06:55:33.641626+00:00"]