Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: ClusterLabs pacemaker — openSUSE-SU-2019:1400 Clear all filters
TI-2019-02895 CVE-2019-3885 · GHSA-65pr-6j4p-wvp6

Use after free in ClusterLabs pacemaker

Priority LOW 37

A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01901 Published 2019-04-18 Partial fix CWE-416
TI-2018-12087 CVE-2018-16877 · GHSA-5jf9-5f49-xqr5

Improper authentication in ClusterLabs pacemaker

Priority LOW 34

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00379 Published 2019-04-18 Partial fix CWE-287