[{"CVE":"CVE-2019-3885","severity":"low","public_date":"2019-04-17T09:45:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1694554","bugzilla_description":"CVE-2019-3885 pacemaker: Information disclosure through use-after-free","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-416","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-3885.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"3.3"},{"CVE":"CVE-2018-16877","severity":"important","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1652646","bugzilla_description":"CVE-2018-16877 pacemaker: Insufficient local IPC client-server authentication on the client's side can lead to local privesc","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-287","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16877.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2018-16878","severity":"moderate","public_date":"2019-04-17T04:30:00Z","advisories":["RHSA-2019:1279","RHSA-2019:1278"],"bugzilla":"1657962","bugzilla_description":"CVE-2018-16878 pacemaker: Insufficient verification inflicted preference of uncontrolled processes can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":["pacemaker-0:1.1.19-8.el7_6.5","pacemaker-0:2.0.1-4.el8_0.3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-16878.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"6.2"},{"CVE":"CVE-2016-7035","severity":"important","public_date":"2016-11-03T00:00:00Z","advisories":["RHSA-2016:2675","RHSA-2016:2614"],"bugzilla":"1369732","bugzilla_description":"CVE-2016-7035 pacemaker: Privilege escalation due to improper guarding of IPC communication","cvss_score":7.2,"cvss_scoring_vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","CWE":"CWE-285","affected_packages":["pacemaker-0:1.1.14-8.el6_8.2","pacemaker-0:1.1.15-11.el7_3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7035.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cvss3_score":"8.8"},{"CVE":"CVE-2016-7797","severity":"moderate","public_date":"2016-02-22T00:00:00Z","advisories":["RHSA-2016:2578"],"bugzilla":"1379784","bugzilla_description":"CVE-2016-7797 pacemaker: pacemaker remote nodes vulnerable to hijacking, resulting in a DoS attack","cvss_score":7.1,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:C","CWE":null,"affected_packages":["pacemaker-0:1.1.15-11.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7797.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H","cvss3_score":"8.6"},{"CVE":"CVE-2015-1867","severity":"moderate","public_date":"2015-03-31T00:00:00Z","advisories":["RHSA-2015:2383","RHSA-2015:1424"],"bugzilla":"1211370","bugzilla_description":"CVE-2015-1867 pacemaker: acl read-only access allow role assignment","cvss_score":6.0,"cvss_scoring_vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","CWE":"CWE-863","affected_packages":["pacemaker-0:1.1.13-10.el7","pacemaker-0:1.1.12-8.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-1867.json"},{"CVE":"CVE-2013-0281","severity":"low","public_date":"2013-02-14T00:00:00Z","advisories":["RHSA-2013:1635"],"bugzilla":"891922","bugzilla_description":"CVE-2013-0281 pacemaker: remote DoS when CIB management is enabled caused by use of blocking sockets","cvss_score":2.6,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:N/I:N/A:P","CWE":null,"affected_packages":["pacemaker-0:1.1.10-14.el6"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-0281.json"}]