Clusterlabs Cluster Glue vulnerabilities

1 known vulnerability affecting clusterlabs/cluster_glue.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2010-2496MEDIUMCVSS 5.5fixed in 1.0.62021-10-18

CVE-2010-2496 [MEDIUM] CWE-287 CVE-2010-2496: stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possi stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.