Lucene search
K

745 matches found

Prion
Prion
added 2021/10/18 1:15 p.m.9 views

Code injection

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

2.1CVSS5.5AI score0.00041EPSS
Exploits0References1Affected Software2
UbuntuCve
UbuntuCve
added 2021/10/18 1:15 p.m.21 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS6.8AI score0.00041EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2021/10/18 12:12 p.m.25 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5CVSS5.9AI score0.00041EPSS
Exploits0
Cvelist
Cvelist
added 2021/10/18 12:12 p.m.13 views

CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer...

5.5AI score0.00041EPSS
Exploits0References1
CVE
CVE
added 2021/10/18 12:12 p.m.35 views

CVE-2010-2496

The CVE-2010-2496 issue affects stonith-ng in pacemaker and cluster-glue where passwords were passed as command-line parameters. This allowed local attackers to access HA stack passwords and potentially influence cluster operations. A fix is available in cluster-glue 1.0.6 and newer and pacemaker...

5.5CVSS5.5AI score0.00041EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2021/10/18 12:0 a.m.2 views

Pacemaker 授权问题漏洞

Pacemaker is a scalable, high-availability cluster resource manager. An authorization issue vulnerability exists in Pacemaker that stoneth-ng of the product passes passwords as command line arguments. This vulnerability can be exploited to obtain the HA stack password. The following products and...

5.5CVSS7AI score0.00041EPSS
Exploits0References2
Rockylinux
Rockylinux
added 2021/09/21 7:10 a.m.11 views

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

1.2AI score
Exploits0
AlmaLinux
AlmaLinux
added 2021/09/21 7:10 a.m.11 views

resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: LVM-activate: Start operation always recreates drop-in file...

3.5AI score
Exploits0
OSV
OSV
added 2021/09/21 7:10 a.m.8 views

ALBA-2021:3579 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: LVM-activate: Start operation always recreates drop-in file...

7AI score
Exploits0
AlmaLinux
AlmaLinux
added 2021/09/21 7:10 a.m.16 views

pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker seems to end up in an unfence loop BZ1972273 On a three-node cluster if two nodes are...

1.8AI score
Exploits0
OSV
OSV
added 2021/09/21 7:10 a.m.7 views

ALBA-2021:3578 pacemaker bug fix and enhancement update

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. Bug Fixes and Enhancements: pacemaker seems to end up in an unfence loop BZ1972273 On a three-node cluster if two nodes are...

7.3AI score
Exploits0
Rockylinux
Rockylinux
added 2021/09/21 7:10 a.m.15 views

pacemaker bug fix and enhancement update

An update is available for pacemaker. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Pacemaker cluster resource manager is a collection of technologies...

1.7AI score
Exploits0
OSV
OSV
added 2021/08/10 12:10 p.m.7 views

ALBA-2021:3089 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: podman resource agent logs spurious failed resource actions...

7AI score
Exploits0
AlmaLinux
AlmaLinux
added 2021/08/10 12:10 p.m.17 views

resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: podman resource agent logs spurious failed resource actions...

3.1AI score
Exploits0
Rockylinux
Rockylinux
added 2021/08/10 12:10 p.m.8 views

resource-agents bug fix and enhancement update

An update is available for resource-agents. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The resource-agents packages provide the Pacemaker and RGManager...

1AI score
Exploits0
Rockylinux
Rockylinux
added 2021/07/22 6:18 p.m.32 views

pcs security and bug fix update

An update for pcs is now available for Rocky Linux 8. Rocky Linux Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links i...

5CVSS1.7AI score0.05892EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/07/21 4:33 p.m.25 views

Security Bulletin: IBM MQ is vulnerable to an issue within Pacemaker. (CVE-2020-25654)

Summary An issue was identified with Pacemaker which is used by IBM MQ to supply RDQM functionality. Vulnerability Details CVEID: CVE-2020-25654 DESCRIPTION: ClusterLabs Pacemaker could allow a local attacker to bypass security restrictions, caused by an access control list bypass flaw. By sendin...

9CVSS0.6AI score0.00086EPSS
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/07/15 12:0 a.m.1 views

The vulnerability of the Pacemaker resource management software, related to lack of access control, allows a intruder to gain access to confidential information or cause service failures.

The vulnerability of the Pacemaker resource management software is related to improper access control. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

9CVSS7.3AI score0.00086EPSS
Exploits0References9Affected Software3
OSV
OSV
added 2021/06/29 2:4 p.m.4 views

ALBA-2021:2598 resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: aws-vpc-move-ip: Enable eni lookup for AWS shared networks v...

7.1AI score
Exploits0
AlmaLinux
AlmaLinux
added 2021/06/29 2:4 p.m.12 views

resource-agents bug fix and enhancement update

The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Bug Fixes and Enhancements: aws-vpc-move-ip: Enable eni lookup for AWS shared networks v...

1.8AI score
Exploits0
Rows per page
Query Builder