CVE-2010-2496

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the…

published October 18, 2021

CVSS
—
EPSS
0%
Percentile
13.4
In the wild
Unconfirmed
What it is

stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00233 · 13.4th percentile
Published
2021-10-18T12:12Z
EPSS history
Timeline
  • 18 OCT 12:12Z
    stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the…
    cvelistv5