vulnerability
Alma Linux: CVE-2020-25654: Moderate: pacemaker security update (ALSA-2020-5487)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:S/C:C/I:C/A:C) | Nov 24, 2020 | May 4, 2022 | Apr 17, 2026 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Nov 24, 2020
Added
May 4, 2022
Modified
Apr 17, 2026
Description
An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration.
Solutions
alma-upgrade-pacemakeralma-upgrade-pacemaker-clialma-upgrade-pacemaker-ctsalma-upgrade-pacemaker-docalma-upgrade-pacemaker-libs-develalma-upgrade-pacemaker-nagios-plugins-metadataalma-upgrade-pacemaker-remote
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.