A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- CVSS 3.0 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade pacemaker-libs-develUpgrade pacemaker-nagios-plugins-metadataUpgrade pacemaker-cliUpgrade pacemaker-ctsUpgrade pacemaker-docUpgrade pacemakerUpgrade pacemaker-cluster-libsUpgrade pacemaker-libsUpgrade pacemaker-debuginfoUpgrade pacemaker-remote | Apr 27, 2020 | Apr 18, 2019 |
| Centos_linux | — | Upgrade pacemaker-libsUpgrade pacemaker-cliUpgrade pacemaker-cluster-libs-debuginfoUpgrade pacemakerUpgrade pacemaker-docUpgrade pacemaker-schemasUpgrade pacemaker-libs-debuginfoUpgrade pacemaker-libs-develUpgrade pacemaker-remoteUpgrade pacemaker-debuginfoUpgrade pacemaker-remote-debuginfoUpgrade pacemaker-cli-debuginfoUpgrade pacemaker-cluster-libsUpgrade pacemaker-nagios-plugins-metadataUpgrade pacemaker-debugsourceUpgrade pacemaker-cts | Aug 28, 2019 | Apr 18, 2019 |
| Debian | — | Upgrade pacemaker | Jan 8, 2021 | Apr 18, 2019 |
| Gentoo Linux | — | Upgrade sys-cluster/pacemaker. | Oct 2, 2023 | Apr 18, 2019 |
| Oracle_linux | — | Upgrade pacemaker-schemasUpgrade pacemaker-libsUpgrade pacemaker-cluster-libs | Jul 22, 2024 | Apr 17, 2019 |
| Redhat_linux | — | Upgrade pacemaker-cli-debuginfoUpgrade pacemaker-ctsUpgrade pacemaker-schemasNo solution existsUpgrade pacemaker-nagios-plugins-metadataUpgrade pacemaker-libs-develUpgrade pacemaker-cluster-libs-debuginfoUpgrade pacemaker-libsUpgrade pacemaker-cliUpgrade pacemaker-libs-debuginfoUpgrade pacemaker-debuginfoUpgrade pacemaker-remote-debuginfoUpgrade pacemaker-debugsourceUpgrade pacemaker-docUpgrade pacemaker-cluster-libsUpgrade pacemakerUpgrade pacemaker-remote | May 28, 2019 | Apr 18, 2019 |
| Suse | — | Upgrade pacemakerUpgrade pacemaker-ctsUpgrade pacemaker-remoteUpgrade libpacemaker3Upgrade libpacemaker-develUpgrade pacemaker-cli | Apr 27, 2019 | Apr 18, 2019 |
| Ubuntu | — | Upgrade pacemaker | Apr 30, 2019 | Apr 18, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub