Security Bulletin: A vulnerability in ganglia affects PowerKVM (CVE-2015-6816)

Summary PowerKVM is affected by a vulnerability in ganglia. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-6816 DESCRIPTION: Ganglia Web could allow a remote attacker to bypass security restrictions, caused by an error in the GangliaAuth.php script. An attacker could explo...

Important: ganglia

Issue Overview: Ganglia-web auth can be bypassed using boolean serialization CVE-2015-6816. Affected Packages: ganglia Issue Correction: Run yum update ganglia or yum update --advisory ALAS-2015-612 to update your system. New Packages: i686: ganglia-gmetad-3.7.2-2.19.amzn1.i686 ...

ganglia-webfrontend -- auth bypass

Ivan Novikov reports: It's easy to bypass auth by using boolean serialization...