Red Hat Security AdvisoryRHSA-2015:1424
pacemaker security and bug fix update
Released 2015-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux High Availability (v. 6) pacemaker-1.1.12-8.el6, pacemaker-cli-1.1.12-8.el6, pacemaker-cluster-libs-1.1.12-8.el6 +5
- Red Hat Enterprise Linux Resilient Storage (v. 6) pacemaker-1.1.12-8.el6, pacemaker-cli-1.1.12-8.el6, pacemaker-cluster-libs-1.1.12-8.el6 +5
Fixes 1 record
Priority LOW 38
Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03 · Published 2015-08-12 · Fixed CWE-264
