ClusterLabs

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

ClusterLabs records in CISA KEV

No ClusterLabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pacemaker 10 records LOW Pcs 6 records MEDIUM Booth 2 records LOW Fence-agents 2 records LOW Hawk 2 records MEDIUM Libqb 2 records MEDIUM Pacemaker Command Line Interface 2 records MEDIUM Cluster Glue 1 record LOW

Records

1 record in Cluster Glue · all components

TI-2010-02396 CVE-2010-2496 · GHSA-4643-vgh5-4r2c

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters…

LOW 24

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00233 Published 2021-10-18 Will not fix CWE-287

Open these records in search →

Critical	3
High	15
Medium	9
Low	0
No CVSS	0