Red Hat Security AdvisoryRHSA-2015:2383
pacemaker security, bug fix, and enhancement update
Released 2015-11-19 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server High Availability (v. 7) pacemaker-1.1.13-10.el7, pacemaker-cli-1.1.13-10.el7, pacemaker-cluster-libs-1.1.13-10.el7 +6
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) pacemaker-1.1.13-10.el7, pacemaker-cli-1.1.13-10.el7, pacemaker-cluster-libs-1.1.13-10.el7 +6
Fixes 1 record
Priority LOW 38
Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03 · Published 2015-08-12 · Fixed CWE-264
