CVE-2015-7945

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Aug 18, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-79464.6Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attac CVE-2015-79617.8SafeNet Authentication Service Remote Web Workplace Agent uses a weak ACL for unspecified installation directories and executable modules, w CVE-2015-79627.8SafeNet Authentication Service for Outlook Web App Agent uses a weak ACL for unspecified installation directories and executable modules, wh CVE-2015-79637.8SafeNet Authentication Service for AD FS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows CVE-2015-79647.8SafeNet Authentication Service for NPS Agent uses a weak ACL for unspecified installation directories and executable modules, which allows l CVE-2015-79657.8SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al CVE-2015-79667.8SafeNet Authentication Service Windows Logon Agent uses a weak ACL for unspecified installation directories and executable modules, which al CVE-2015-79677.8SafeNet Authentication Service for Citrix Web Interface Agent uses a weak ACL for unspecified installation directories and executable module CVE-2015-79684.3nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusion via the sap/bc/ui2 CVE-2015-79694.9Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of serv CVE-2015-79704.9The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM CVE-2015-79712.1Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows