Lucene search
Ubuntu.comUB:CVE-2015-1867HistoryAug 12, 2015 - 12:00 a.m.
CVE-2015-1867
2015-08-1200:00:00
ubuntu.com
ubuntu.com
7
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.5%
Pacemaker before 1.1.13 does not properly evaluate added nodes, which
allows remote read-only users to gain privileges via an acl command.
Notes
| Author | Note |
|---|---|
| mdeslaur | introduced by f242c1ef in 1.1.12-rc1 fixed by 84ac07c in 1.1.13-rc2 |
Related
cve
cve
CVE-2015-1867
2015-08-12 14:59:06
nessus
nessus
Scientific Linux Security Update : pacemaker on SL7.x x86_64 (20151119)
2015-12-22 00:00:00
CentOS 6 : pacemaker (CESA-2015:1424)
2015-07-28 00:00:00
Scientific Linux Security Update : pacemaker on SL6.x i386/x86_64 (20150722)
2015-08-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: pacemaker-1.1.13-3.fc22
2015-10-23 17:26:55
[SECURITY] Fedora 21 Update: pacemaker-1.1.13-3.fc21
2015-11-01 22:22:38
[SECURITY] Fedora 23 Update: pacemaker-1.1.13-3.fc23
2015-10-31 16:10:22
centos
centos
pacemaker security update
2015-07-26 14:12:39
pacemaker security update
2015-11-30 19:46:54
veracode
veracode
Privilege Escalation
2019-01-15 09:06:43
nvd
nvd
CVE-2015-1867
2015-08-12 14:59:06
debiancve
debiancve
CVE-2015-1867
2015-08-12 14:59:06
redhat
redhat
(RHSA-2015:1424) Moderate: pacemaker security and bug fix update
2015-07-22 00:00:00
prion
prion
Command injection
2015-08-12 14:59:00
cvelist
cvelist
CVE-2015-1867
2015-08-12 14:00:00
gentoo
gentoo
Pacemaker: Multiple vulnerabilities
2017-10-08 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.01 Low
EPSS
Percentile
83.5%
Related for UB:CVE-2015-1867