What is CVE-2021-3020?

CVE-2021-3020 is a high-severity vulnerability in Clusterlabs Hawk, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2022-08-26.

How severe is CVE-2021-3020?

High severity. CVSS v3 base score is 8.8 out of 10.

Privilege escalation in Clusterlabs Hawk

CVE-2021-3020

An issue was discovered in ClusterLabs Hawk (aka HA Web Konsole) through 2.3.0-15. It ships the binary hawk_invoke (built from tools/hawk_invoke.c), intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root (with an attempt to limit this to safe combinations). This user is able to execute an interactive "shell" that isn't limited to the commands specified in hawk_invoke, allowing escalation to root.

Vulnerability class: Privilege Escalation

Published 2022-08-26 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.012 (67.7th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 68th percentile — 67.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.012 · newest: 0.012 · change: +0.000

Affected products

Clusterlabs Hawk

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

github.com/ClusterLabs/hawk/releases (Third Party Advisory, Release Notes)
bugzilla.suse.com/show_bug.cgi (Permissions Required)
github.com/ClusterLabs/crmsh/commit/c538024b8ebd138dc373b005189471d9b77e9c82 (Patch, Third Party Advisory)

Frequently asked questions

What is CVE-2021-3020?: CVE-2021-3020 is a high-severity vulnerability in Clusterlabs Hawk, classified under Improper Privilege Management. CVSS score: 8.8/10. Published 2022-08-26.
How severe is CVE-2021-3020?: High severity. CVSS v3 base score is 8.8 out of 10.