Redhat

Enterprise Linux High Availability

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-2319

  • EPSS 0.11%
  • Published 17.05.2023 23:15:09
  • Last modified 22.01.2025 19:15:09

It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS package), which was previously addressed in Red Hat En...

7.5

CVE-2016-7797

  • EPSS 2.95%
  • Published 24.03.2017 15:59:00
  • Last modified 20.04.2025 01:37:25

Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.

7.5

CVE-2015-1867

  • EPSS 0.71%
  • Published 12.08.2015 14:59:06
  • Last modified 12.04.2025 10:46:40

Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.

6.8

CVE-2015-1848

Exploit
  • EPSS 1.21%
  • Published 14.05.2015 14:59:07
  • Last modified 12.04.2025 10:46:40

The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this iss...