ClusterLabs

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

ClusterLabs records in CISA KEV

No ClusterLabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pacemaker 10 records LOW Pcs 6 records MEDIUM Booth 2 records LOW Fence-agents 2 records LOW Hawk 2 records MEDIUM Libqb 2 records MEDIUM Pacemaker Command Line Interface 2 records MEDIUM Cluster Glue 1 record LOW

Records

2 records in Booth · all components

TI-2022-02358 CVE-2022-2553 · GHSA-9ppf-2r5r-2chh

Improper authentication in Booth

LOW 32

The authfile directive in the booth config file is ignored, preventing use of authentication in communications from node to node.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01313 Published 2022-07-28 Partial fix CWE-287

TI-2024-02855 CVE-2024-3049 · GHSA-gqh6-f673-ccgc

Booth: specially crafted hash can lead to invalid hmac being accepted by booth server

LOW 27

A flaw was found in Booth, a cluster ticket manager.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.0053 Published 2024-06-06 Partial fix · 1.1-1.el8_10.1, 1.0-199.1.ac1d34c.git.el8_4.2 +5 CWE-345

Open these records in search →

Critical	3
High	15
Medium	9
Low	0
No CVSS	0