CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

CVE-2017-3881

CVE-2017-3881 is a Cisco IOS/IOS XE vulnerability in the Cluster Management Protocol (CMP) handling. Two factors enable exploitation: (1) CMP-specific Telnet options were not restricted to internal cluster communications and could be processed over any Telnet session; (2) malformed CMP-specific T...

Cisco IOS and IOS XE Software Cluster Management Protocol Remote Code Execution Vulnerability

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

CVE-2017-3881: Improper Input Validation

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

PT-2017-1510

Name of the Vulnerable Software and Affected Versions Cisco IOS and Cisco IOS XE Software affected versions not specified Description A vulnerability in the Cisco Cluster Management Protocol CMP processing code could allow an unauthenticated, remote attacker to cause a reload of an affected devic...

CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

VulnCheck KEV: CVE-2017-3881

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges...

SLURM Prolog Security Bypass Vulnerability

Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters. A security bypass vulnerability exists in Slurm. An attacker can exploit this vulnerability to perform unauthorized operations bypassing security restrictions...

Arbitrary File Upload Vulnerability in Government Affairs Cluster Management System of Beijing Xiangyu Leading Software Co.

Beijing Xiangyu Leader Software Co., Ltd. government affairs cluster management system is an Internet service platform that provides information management services for Chinese government functional units at all levels. There is an arbitrary file upload vulnerability in the government cluster...

[SECURITY] Fedora 25 Update: mod_cluster-1.3.3-8.fc25

Modcluster is an httpd-based load balancer. Like modjk and modproxy, modcluster uses a communication channel to forward requests from httpd to one of a set of application server nodes. Unlike modjk and modproxy, modclus ter leverages an additional connection between the application server nodes a...

The vulnerability of the Kubernetes cluster management software allows a hacker to gain access to protected information.

The vulnerability of the software interface of the Kubernetes cluster management server is related to lack of access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected information using a specially created patch...

The vulnerability of the Kubernetes cluster management software allows a hacker to increase their privileges.

The vulnerability of the software interface of the Kubernetes cluster management server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges by modifying system configuration during the system build process...

PT-2016-1270 · Red Hat · Openshift

Name of the Vulnerable Software and Affected Versions: Openshift affected versions not specified Description: The issue is related to a lack of access control in the interface of a cluster management tool for Kubernetes virtual machines, allowing remote attackers to elevate their privileges. This...

Debian DSA-3431-1 : ganeti - security update

Pierre Kim discovered two vulnerabilities in the restful API of Ganeti, a virtual server cluster management tool. SSL parameter negotiation could result in denial of service and the DRBD secret could leak. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

CentOS 7 : pcs (CESA-2015:2290)

An updated pcs package that fixes one security issue, several bugs, and add various enhancements is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

Docker Remote API 未授权访问

介绍 docker 在使用集群管理如:Kubernetes,swarm时，要使用remote api对节点进行管理.remote api无认证时的默认端口是2375需要TLS认证默认登录是2376。 remote api默认是可以不需要认证能直接访问，能直接对docker进行操作,如新建容器,删除容器,查看镜像容器信息等... remote api操作方法见docker官方文档 检测docker remote api 未授权访问可以使用curl或者直接用浏览器访问 http://ip:2375/info 如果返回了json证明漏洞存在，如下图 其他参考链接...

[SECURITY] Fedora 22 Update: pacemaker-1.1.13-3.fc22

Pacemaker is an advanced, scalable High-Availability cluster resource manager for Corosync, CMAN and/or Linux-HA. It supports more than 16 node clusters with significant capabilities for managing resources and dependencies. It will run scripts at initialization, when machines go up or down, when...

CVE-2015-4235: Undefined Security Weakness

Cisco Application Policy Infrastructure Controller APIC devices with software before 1.03o and 1.1 before 1.11j and Nexus 9000 ACI devices with software before 11.04o and 11.1 before 11.11j do not properly restrict access to the APIC filesystem, which allows remote authenticated users to obtain...

pacemaker security update

CentOS Errata and Security Advisory CESA-2013:1635 Updated pacemaker packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having low security impact. A Common...

RHEL 5 : cman (RHSA-2009:1341)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1341 advisory. The Cluster Manager cman utility provides services for managing a Linux cluster. Multiple insecure temporary file use flaws were found in...