CVE-2022-2553: Clusterlabs Booth

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node. As a result, nodes that do not have the correct authentication key are not prevented from communicating with other nodes in the cluster.

Affected products

• Clusterlabs Booth: up to and including 1.0
• Debian Debian Linux: version 10.0 only; version 11.0 only
• Fedoraproject Fedora: version 35 only; version 36 only

Published 2022-07-28. Last modified 2026-06-17.