CVE-2011-5271: Pacemaker before 1.1.6 configure script creates temporary files insecurely

PriorityP420medium5.5CVSS 3.1

AVLACLPRNUIRSUCNIHAN

EPSS

0.49%

38.4th percentile

Pacemaker before 1.1.6 configure script creates temporary files insecurely

Affected

6 ranges

Vendor	Product	Version range	Fixed in
clusterlabs	pacemaker	< 1.1.6	1.1.6
clusterlabs	pacemaker	>= 0 < 1.1.6-1	1.1.6-1
clusterlabs	pacemaker	>= 0 < 1.1.6-1	1.1.6-1
clusterlabs	pacemaker	>= 0 < 1.1.6-1	1.1.6-1
clusterlabs	pacemaker	>= 0 < 1.1.6-1	1.1.6-1
debian	pacemaker	< pacemaker 1.1.6-1 (bookworm)	pacemaker 1.1.6-1 (bookworm)

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

nvdv2.03.3LOWAV:L/AC:M/Au:N/C:N/I:P/A:P

osv5.5MEDIUM

vendor_debian5.5LOW

vendor_redhat5.5MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.