Enterprise Linux High Availability (Redhat) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2023-05-17. Vendor: Redhat.

CVEs of Enterprise Linux High Availability

• CVE-2023-2319 - CVSS 9.8 (critical), 2023-05-17: It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the…
• CVE-2016-7797 - CVSS 7.5 (high), 2017-03-24: Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated…
• CVE-2015-1867 - CVSS 7.5 (high), 2015-08-12: Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.
• CVE-2015-1848 - CVSS 6.8 (medium), 2015-05-14: The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to…