Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade sys-cluster/pacemaker. | Oct 30, 2017 | Aug 12, 2015 |
| Suse | — | Upgrade pacemakerUpgrade libpacemaker3Upgrade pacemaker-remoteUpgrade libpacemaker-develUpgrade pacemaker-ctsUpgrade pacemaker-cli | Dec 22, 2016 | Aug 12, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub