Lucene search
K

750 matches found

Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.19 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : pacemaker Vulnerability (NS-SA-2021-0160)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has pacemaker packages installed that are affected by a vulnerability: - An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with...

9CVSS7.4AI score0.02002EPSS
Exploits0References3
OSV
OSV
added 2021/10/18 1:15 p.m.5 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS6.8AI score0.00225EPSS
Exploits0References4
OSV
OSV
added 2021/10/18 1:15 p.m.2 views

DEBIAN-CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS6.8AI score0.00225EPSS
Exploits0References1
NVD
NVD
added 2021/10/18 1:15 p.m.12 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS0.00225EPSS
Exploits0References1
Prion
Prion
added 2021/10/18 1:15 p.m.9 views

Code injection

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

2.1CVSS5.5AI score0.00225EPSS
Exploits0References1Affected Software2
UbuntuCve
UbuntuCve
added 2021/10/18 1:15 p.m.26 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS6.8AI score0.00225EPSS
Exploits0References4
OSV
OSV
added 2021/10/18 1:15 p.m.0 views

UBUNTU-CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS7.3AI score0.00225EPSS
Exploits0References5
CVE
CVE
added 2021/10/18 12:12 p.m.36 views

CVE-2010-2496

The CVE-2010-2496 issue affects stonith-ng in pacemaker and cluster-glue where passwords were passed as command-line parameters. This allowed local attackers to access HA stack passwords and potentially influence cluster operations. A fix is available in cluster-glue 1.0.6 and newer and pacemaker...

5.5CVSS5.5AI score0.00225EPSS
Exploits0References1Affected Software2
Debian CVE
Debian CVE
added 2021/10/18 12:12 p.m.25 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS5.9AI score0.00225EPSS
Exploits0
Cvelist
Cvelist
added 2021/10/18 12:12 p.m.13 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5AI score0.00225EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/18 12:0 a.m.3 views

Pacemaker 授权问题漏洞

Pacemaker is a scalable, high-availability cluster resource manager. An authorization issue vulnerability exists in Pacemaker that stoneth-ng of the product passes passwords as command line arguments. This vulnerability can be exploited to obtain the HA stack password. The following products and...

5.5CVSS7AI score0.00225EPSS
Exploits0References2
Rockylinux
Rockylinux
added 2021/09/21 7:10 a.m.11 views

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

1.2AI score
Exploits0
AlmaLinux
AlmaLinux
added 2021/09/21 7:10 a.m.13 views

resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: LVM-activate: Start operation always recreates drop-in file...

3.5AI score
Exploits0
OSV
OSV
added 2021/09/21 7:10 a.m.10 views

ALBA-2021:3579 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: LVM-activate: Start operation always recreates drop-in file...

7AI score
Exploits0
Rockylinux
Rockylinux
added 2021/09/21 7:10 a.m.21 views

pacemaker bug fix and enhancement update

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Pacemaker cluster resource manager is a collection of technologies...

1.7AI score
Exploits0
AlmaLinux
AlmaLinux
added 2021/09/21 7:10 a.m.19 views

pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker seems to end up in an unfence loop BZ1972273 On a three-node cluster if two nodes are...

1.8AI score
Exploits0
OSV
OSV
added 2021/09/21 7:10 a.m.9 views

ALBA-2021:3578 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker seems to end up in an unfence loop BZ1972273 On a three-node cluster if two nodes are...

7.3AI score
Exploits0
AlmaLinux
AlmaLinux
added 2021/08/10 12:10 p.m.19 views

resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: podman resource agent logs spurious failed resource actions...

3.1AI score
Exploits0
Rockylinux
Rockylinux
added 2021/08/10 12:10 p.m.9 views

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

1AI score
Exploits0
OSV
OSV
added 2021/08/10 12:10 p.m.9 views

ALBA-2021:3089 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: podman resource agent logs spurious failed resource actions...

7AI score
Exploits0
Rows per page
Query Builder