Pacemaker CVE-2015-1867 Security Bypass Vulnerability
BID:74231
Info
Pacemaker CVE-2015-1867 Security Bypass Vulnerability
| Bugtraq ID: | 74231 |
| Class: | Design Error |
| CVE: |
CVE-2015-1867 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 20 2015 12:00AM |
| Updated: | Aug 12 2015 10:11PM |
| Credit: | Franck Grosjean |
| Vulnerable: |
Redhat Enterprise Linux Resilient Storage 6 Redhat Enterprise Linux High Availability 6 ClusterLabs Pacemaker 1.1.12 ClusterLabs Pacemaker 1.1.11 |
| Not Vulnerable: | |
Exploit / POC
Pacemaker CVE-2015-1867 Security Bypass Vulnerability
Attackers can use readily available tools to exploit this issue.
Attackers can use readily available tools to exploit this issue.
Solution / Fix
Pacemaker CVE-2015-1867 Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Pacemaker CVE-2015-1867 Security Bypass Vulnerability
References:
References:
- CVE-2015-1867 pacemaker: acl read-only access allow role assignment (Red Hat Bugzilla)
- Pacemaker Homepage (ClusterLabs)