Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-1867
HistoryAug 12, 2015 - 2:59 p.m.

CVE-2015-1867

2015-08-1214:59:06
CWE-264
[email protected]
web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

JSON

Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.

Affected configurations

NVD
Node
redhatenterprise_linux_high_availabilityMatch6.0
OR
redhatenterprise_linux_high_availabilityMatch7.0
OR
redhatenterprise_linux_resilient_storageMatch6.0
OR
redhatenterprise_linux_resilient_storageMatch7.0
Node
clusterlabspacemakerRange≤1.1.12

Related

nessus 10
centos 2
ubuntucve 1
cve 1
fedora 3
redhat 2
prion 1
cvelist 1
veracode 1
debiancve 1
gentoo 1
nessus
nessus
Scientific Linux Security Update : pacemaker on SL6.x i386/x86_64 (20150722)
2015-08-04 00:00:00
Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20151119)
2015-12-22 00:00:00
CentOS 6 : pacemaker (CESA-2015:1424)
2015-07-28 00:00:00
centos
centos
pacemaker security update
2015-07-26 14:12:39
pacemaker security update
2015-11-30 19:46:54
ubuntucve
ubuntucve
CVE-2015-1867
2015-08-12 00:00:00
cve
cve
CVE-2015-1867
2015-08-12 14:59:06
fedora
fedora
[SECURITY] Fedora 22 Update: pacemaker-1.1.13-3.fc22
2015-10-23 17:26:55
[SECURITY] Fedora 21 Update: pacemaker-1.1.13-3.fc21
2015-11-01 22:22:38
[SECURITY] Fedora 23 Update: pacemaker-1.1.13-3.fc23
2015-10-31 16:10:22
redhat
redhat
(RHSA-2015:2383) Moderate: pacemaker security, bug fix, and enhancement update
2015-11-19 13:42:51
(RHSA-2015:1424) Moderate: pacemaker security and bug fix update
2015-07-22 00:00:00
prion
prion
Command injection
2015-08-12 14:59:00
cvelist
cvelist
CVE-2015-1867
2015-08-12 14:00:00
veracode
veracode
Privilege Escalation
2019-01-15 09:06:43
debiancve
debiancve
CVE-2015-1867
2015-08-12 14:59:06
gentoo
gentoo
Pacemaker: Multiple vulnerabilities
2017-10-08 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.7 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.5%

JSON
Related for NVD:CVE-2015-1867
nessus10centos2ubuntucve1cve1fedora3redhat2prion1cvelist1veracode1debiancve1gentoo1