Clusterlabs Pacemaker vulnerabilities

• clusterlabs pacemaker, cluster glue +1 more stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it... CVE-2010-2496 Fix available 5.5 MediumOctober 18, 2021
• clusterlabs pacemaker, debian linux +1 more An ACL bypass flaw was found in pacemaker before 1.1.24-rc1 and 2.0.5-rc2. An attacker having a... CVE-2020-25654 Fix available 7.2 HighOctober 27, 2020
• clusterlabs pacemaker Pacemaker before 1.1.6 configure script creates temporary files insecurely CVE-2011-5271 Fix available 5.5 MediumNovember 12, 2019
• clusterlabs pacemaker, canonical ubuntu linux, fedoraproject fedora +2 more A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result... CVE-2019-3885 Fix available 3.3 LowApril 17, 2019
• clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 more A flaw was found in pacemaker up to and including version 2.0.1. An insufficient verification... CVE-2018-16878 Fix available 6.2 MediumApril 17, 2019
• clusterlabs pacemaker, canonical ubuntu linux, debian linux +6 more +8 more A flaw was found in the way pacemaker's client-server authentication was implemented in versions... CVE-2018-16877 Fix available 8.8 HighApril 17, 2019
• redhat pcs, clusterlabs pacemaker command line interface, redhat enterprise linux +2 more pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user... CVE-2018-1079 Fix available 8.7 HighApril 12, 2018
• redhat pcs, clusterlabs pacemaker command line interface, debian linux +1 more +3 more pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST... CVE-2018-1086 Fix available 4.3 MediumApril 9, 2018
• clusterlabs pacemaker, opensuse leap, redhat enterprise linux high availability +3 more +5 more Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a... CVE-2016-7797 Fix available 7.5 HighNovember 22, 2016
• clusterlabs pacemaker, redhat enterprise linux server, enterprise linux server eus +2 more An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its... CVE-2016-7035 Fix available 8.8 HighNovember 3, 2016
• clusterlabs pacemaker, redhat enterprise linux high availability, enterprise linux resilient storage +2 more Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only... CVE-2015-1867 Fix available 7.5 HighAugust 12, 2015
• clusterlabs pacemaker, redhat enterprise linux +1 more Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management... CVE-2013-0281 Fix available 4.3 MediumNovember 23, 2013