Privilege Escalation

2019-01-1509:06:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.01 Low

EPSS

Percentile

83.5%

JSON

pacemaker is vulnerable to privilege escalation attacks. The vulnerability exists as pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.

CPENameOperatorVersion
pacemakereq1.1.10__14.el6
pacemakereq1.1.12__22.el7_1.2
pacemakereq1.1.10__14.el6_5.1
pacemakereq1.1.10__14.el6_5.3
pacemakereq1.1.7__6.el6
pacemakereq1.1.10__14.el6_5.2
pacemakereq1.1.2__7.el6
pacemakereq1.1.12__4.el6
pacemakereq1.1.8__7.el6
pacemakereq1.1.10__1.el6_4.4

Name	Operator	Version
pacemaker	eq	1.1.10__14.el6
pacemaker	eq	1.1.12__22.el7_1.2
pacemaker	eq	1.1.10__14.el6_5.1
pacemaker	eq	1.1.10__14.el6_5.3
pacemaker	eq	1.1.7__6.el6
pacemaker	eq	1.1.10__14.el6_5.2
pacemaker	eq	1.1.2__7.el6
pacemaker	eq	1.1.12__4.el6
pacemaker	eq	1.1.8__7.el6
pacemaker	eq	1.1.10__1.el6_4.4