[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWmVfebR8Q8TF7SKjOl5yJeLdCuSJAgwzOYbXPaX6tvA":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":62,"kevVulnerabilities":125,"topProductsByCves":126,"seoMetadata":136,"meta":145},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":61},5662,"clusterlabs",9,27,0,542,"2024-06-06","c",[16,22,28,32,37,42,47,52,57],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},27768,"pacemaker",50,10,"2021-10-18",{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},27770,"pcs",164,6,"2023-05-17",{"id":29,"product_name":30,"version_count":9,"cve_count":31,"kev_count":11,"last_cve_update":13},27762,"booth",2,{"id":33,"product_name":34,"version_count":35,"cve_count":31,"kev_count":11,"last_cve_update":36},27767,"libqb",35,"2023-08-08",{"id":38,"product_name":39,"version_count":40,"cve_count":31,"kev_count":11,"last_cve_update":41},27766,"hawk",29,"2022-08-26",{"id":43,"product_name":44,"version_count":45,"cve_count":31,"kev_count":11,"last_cve_update":46},27765,"fence-agents",57,"2020-01-02",{"id":48,"product_name":49,"version_count":50,"cve_count":31,"kev_count":11,"last_cve_update":51},27769,"pacemaker_command_line_interface",151,"2018-04-12",{"id":53,"product_name":54,"version_count":55,"cve_count":56,"kev_count":11,"last_cve_update":21},27763,"cluster_glue",12,1,{"id":58,"product_name":59,"version_count":35,"cve_count":56,"kev_count":11,"last_cve_update":60},27764,"crmsh","2021-01-12","Clusterlabs is a technology vendor with 9 tracked products and 27 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[63,71,79,85,92,98,104,110,114,119],{"cveId":64,"description":65,"publishedDate":60,"cvssScore":66,"cvssVersion":67,"severity":68,"isKev":69,"epssScore":70},"CVE-2020-35458","An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id parameter in the login_from_cookie cookie. The user logout routine could be used by unauthenticated remote attackers to execute code as hauser.",9.8,"v3.1","Critical",false,0.05562,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":69,"epssScore":78},"CVE-2016-7797","Pacemaker before 1.1.15, when using pacemaker remote, might allow remote attackers to cause a denial of service (node disconnection) via an unauthenticated connection.","2017-03-24",7.5,"v3.0","High",0.0325,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":75,"cvssVersion":83,"severity":77,"isKev":69,"epssScore":84},"CVE-2015-1867","Pacemaker before 1.1.13 does not properly evaluate added nodes, which allows remote read-only users to gain privileges via an acl command.","2015-08-12","v2",0.03,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":83,"severity":90,"isKev":69,"epssScore":91},"CVE-2013-0281","Pacemaker 1.1.10, when remote Cluster Information Base (CIB) configuration or resource management is enabled, does not limit the duration of connections to the blocking sockets, which allows remote attackers to cause a denial of service (connection blocking).","2013-11-23",4.3,"Medium",0.02607,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":76,"severity":77,"isKev":69,"epssScore":97},"CVE-2016-0721","Session fixation vulnerability in pcsd in pcs before 0.9.157.","2017-04-21",8.1,0.02294,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":67,"severity":90,"isKev":69,"epssScore":103},"CVE-2019-10153","A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.","2019-07-30",5,0.02171,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"cvssVersion":67,"severity":77,"isKev":69,"epssScore":109},"CVE-2022-1049","A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could still login.","2022-03-25",8.8,0.01969,{"cveId":111,"description":112,"publishedDate":51,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":69,"epssScore":113},"CVE-2018-1086","pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the \u002Frun_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.",0.01916,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":69,"epssScore":118},"CVE-2019-3885","A use-after-free flaw was found in pacemaker up to and including version 2.0.1 which could result in certain sensitive information to be leaked via the system logs.","2019-04-18",0.01901,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":67,"severity":77,"isKev":69,"epssScore":124},"CVE-2020-25654","An ACL bypass flaw was found in pacemaker. An attacker having a local account on the cluster and in the haclient group could use IPC communication with various daemons directly to perform certain tasks that they would be prevented by ACLs from doing if they went through the configuration.","2020-11-24",7.2,0.01868,[],[127,128,129,130,131,132,133,134,135],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":21},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":11,"last_cve_update":27},{"id":29,"product_name":30,"version_count":9,"cve_count":31,"kev_count":11,"last_cve_update":13},{"id":33,"product_name":34,"version_count":35,"cve_count":31,"kev_count":11,"last_cve_update":36},{"id":38,"product_name":39,"version_count":40,"cve_count":31,"kev_count":11,"last_cve_update":41},{"id":43,"product_name":44,"version_count":45,"cve_count":31,"kev_count":11,"last_cve_update":46},{"id":48,"product_name":49,"version_count":50,"cve_count":31,"kev_count":11,"last_cve_update":51},{"id":53,"product_name":54,"version_count":55,"cve_count":56,"kev_count":11,"last_cve_update":21},{"id":58,"product_name":59,"version_count":35,"cve_count":56,"kev_count":11,"last_cve_update":60},{"title":137,"metaDescription":138,"keywords":139,"structuredData":140},"Clusterlabs - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Clusterlabs covering 9 products with 27 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Clusterlabs vulnerabilities, Clusterlabs security, Clusterlabs CVE, Clusterlabs threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":141,"@type":142,"name":143,"description":138,"url":144},"https:\u002F\u002Fschema.org","Organization","Clusterlabs","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fclusterlabs",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":146,"apiVersion":147},"2026-10-17T15:53:02.423Z","3.0"]