Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2016-7797

pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

CVSS 3.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Clusterlabs Opensuse Opensuse Project and 2 more
Products
Pacemaker Leap Leap and 5 more
CVE-2015-1848

pcs: improper web session variable signing

The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.

CVSS 2.0 · 6.8 Medium EPSS 2.4% KEV · Not listed
Vendors
Fedora Redhat
Products
Pacemaker Configuration System Enterprise Linux Enterprise Linux High Availability and 3 more
CVE-2023-2319

pcs: webpack: Regression of CVE-2023-28154 fixes in the Red Hat Enterprise Linux

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat Enterprise Linux 9.1 via erratum RHSA-2023:1591. The CVE-2023-2319 was assigned to that Red Hat specific security regression in Red Hat Enterprise Linux 9.2.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Clusterlabs Redhat
Products
Pcs Enterprise Linux Enterprise Linux High Availability and 1 more