luci-app-sms-tool v1.9-6 was discovered to contain a command injection vulnerability via the score parameter.

A security flaw was found in the way Luci administration application processed ticket cookies. A remote attacker, with certain knowledge of running Luci instance environment details could use this flaw to bypass standard Luci authentication mechanism (access resources which should be otherwise protected by authentication).

It was reported that Luci's (Luci is a web based front-end component of the Conga cluster management system) user session timeout feature depended only on JavaScript script running in the user's browser. If user closed browser tab without logging out of Luci session and without closing browser, they could re-open Luci web interface and continue using the session even after the timeout period has elapsed.

References: http://sourceware.org/cluster/conga/

Acknowledgement:

Red Hat would like to thank George Hedfors of Cybercom Sweden East AB for reporting this issue.