CyberSecBulletin

Xcat2 vulnerabilities

We track 1 vulnerability in Xcat2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 8, 2023.

1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score

Latest Xcat2 vulnerabilities

  • 8.8 High severity

    xcat-core: Incorrect Authorization

    CVE-2023-27486Xcat2

    xCAT is a toolkit for deployment and administration of computer clusters. In versions prior to 2.16.5 if zones are configured as a mechanism to secure clusters in XCAT, it is possible for a local root user from one node to obtain credentials to SSH to any node