CVE-2016-7035

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-285

Affected software

Vendor	Product	Versions
ClusterLabs	pacemaker	1.1.16

References

http://rhn.redhat.com/errata/RHSA-2016-2614.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2675.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/03/5Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/94214Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7035Issue Tracking, Third Party Advisory
https://github.com/ClusterLabs/pacemaker/commit/5d71e65049Third Party Advisory
https://lists.clusterlabs.org/pipermail/users/2016-November/004432.htmlMailing List, Vendor Advisory
https://security.gentoo.org/glsa/201710-08Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2614.htmlThird Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2675.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/03/5Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/94214Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7035Issue Tracking, Third Party Advisory
https://github.com/ClusterLabs/pacemaker/commit/5d71e65049Third Party Advisory
https://lists.clusterlabs.org/pipermail/users/2016-November/004432.htmlMailing List, Vendor Advisory
https://security.gentoo.org/glsa/201710-08Third Party Advisory

Timeline

Published: Sep 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-70369.8python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.CVE-2016-70377.5The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, wh CVE-2016-70387.3In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.CVE-2016-70397.5The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibl CVE-2016-70408.8Red Hat CloudForms Management Engine 4.1 does not properly handle regular expressions passed to the expression engine via the JSON API and t CVE-2016-70416.5Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory CVE-2016-70426.2The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protecto CVE-2016-70439.8It has been reported that KIE server and Busitess Central before version 7.21.0.Final contain username and password as plaintext Java proper CVE-2016-70447.5The unformat_24bit_color function in the format parsing code in Irssi before 0.8.20, when compiled with true-color enabled, allows remote at CVE-2016-70457.5The format_send_to_gui function in the format parsing code in Irssi before 0.8.20 allows remote attackers to cause a denial of service (heap CVE-2016-70465.9Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers CVE-2016-70474.3A flaw was found in the CloudForms API before 5.6.3.0, 5.7.3.1 and 5.8.1.2. A user with permissions to use the MiqReportResults capability w