Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-10153

fence-agents: mis-handling of non-ASCII characters in guest comment fields

A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.

CVSS 3.1 · 5.0 Medium EPSS 2.2% KEV · Not listed
Vendors
Clusterlabs Redhat
Products
Fence-agents Enterprise Linux Enterprise Linux Server and 1 more
CVE-2014-0104

fence-agents: no verification of remote SSL certificates

In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary SSL certificates.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Clusterlabs
Products
Fence-agents