PA
Product
Pacemaker
10
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 3Low 0
Watch
Add Pacemaker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-16877 | 7.8 | Apr 18 | A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0 Affected: through 2.0.0 |
| CVE-2016-7035 | 7.8 | Sep 10 | An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface Affected: through 1.1.16 |
| CVE-2019-3885 | 7.5 | Apr 18 | A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs Affected: through 2.0.1 |
| CVE-2016-7797 | 7.5 | Mar 24 | Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection Affected: through 1.1.14 |
| CVE-2020-25654 | 7.2 | Nov 24 | An ACL bypass flaw was found in pacemaker Affected: before 1.1.23; 2.0.0 before 2.0.3; 2.0.5 |
| CVE-2010-2496 | 5.5 | Oct 18 | stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and… Affected: before 1.1.3 |
| CVE-2011-5271 | 5.5 | Nov 12 | Pacemaker before 1.1.6 configure script creates temporary files insecurely Affected: before 1.1.6 |
| CVE-2018-16878 | 5.5 | Apr 18 | A flaw was found in pacemaker up to and including version 2.0.1 Affected: through 2.0.1 |
| CVE-2015-1867 | – | Aug 12 | Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command Affected: through 1.1.12 |
| CVE-2013-0281 | – | Nov 23 | Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not limit the duration of connections to the blocking sockets,… Affected: 1.1.10 |
Showing 10