Wind River Support Network

HomeDefectsCGP7-365

Fixed

CGP7-365 : Security Advisory - pacemaker - CVE-2015-1867

Created: Aug 16, 2015 Updated: Mar 11, 2016

Resolved Date: Sep 17, 2015

Previous ID: LIN7-4526

Found In Version: 7.0.0.4

Fix Version: 7.0.0.10

Severity: Standard

Applicable for: Wind River Linux 7

Component/s: Userspace

Description

Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1867