CVE-2015-1867 Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat enterprise linux high availability | = 6.0 | No fix listed |
| redhat enterprise linux high availability | = 7.0 | No fix listed |
| redhat enterprise linux resilient storage | = 6.0 | No fix listed |
| redhat enterprise linux resilient storage | = 7.0 | No fix listed |
| clusterlabs pacemaker | <= 1.1.12 | No fix listed |
References
- FEDORA-2015-e5e36bbb87 vendor-advisory
- FEDORA-2015-f6860d8f9d vendor-advisory
- FEDORA-2015-f9864ecd8f vendor-advisory
- RHSA-2015:1424 third-party-advisory vendor-advisory
- RHSA-2015:2383 third-party-advisory vendor-advisory
- 74231 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking
- github.com
- GLSA-201710-08 vendor-advisory
- Debian Security Tracker CVE-2015-1867 vendor-advisory