CVE:CVE-2015-1867
CNNVD:CNNVD-201505-379
Pacemaker是一款可扩展的高可用性集群资源管理器。
Pacemaker 1.1.13之前版本存在权限许可和访问控制问题漏洞，该漏洞源于程序没有正确评估新增的节点。攻击者利用该漏洞通过acl命令获取权限。
solution:Upgrade redhat enterprise_linux_high_availability to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade redhat enterprise_linux_resilient_storage to a higher version than 6.0,7.0,and avoid the version 6.0,7.0; Upgrade clusterlabs pacemaker to a higher version than 1.1.12,and avoid the version (,1.1.12]