CVE-2018-16877CWE-287

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0

High · published April 18, 2019

CVSS v3.0
8.8
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0. A local attacker could use this flaw, and combine it with other IPC weaknesses, to achieve local privilege escalation.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2019-04-18T00:00Z
EPSS history
Timeline
  • 18 APR 00:00Z
    A flaw was found in the way pacemaker's client-server authentication was implemented in versions up to and including 2.0.0
    cvelistv5