CVE-2010-2496 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-2496 Interim 1 28 2025-03-25T02:01:51Z current 2021-05-30T12:52:27Z 2025-03-25T02:01:51Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-2496 stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Availability Extension 15 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Availability Extension 15 SP4 SUSE Linux Enterprise High Availability Extension 15 SP5 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 openSUSE Tumbleweed cluster-glue cluster-glue-devel cluster-glue-libs libglue-devel libglue2 libpacemaker-devel libpacemaker-devel-1.1.12-7.1 libpacemaker-devel-1.1.13-10.4 libpacemaker-devel-1.1.15+git20161104.b6f251a-1.1 libpacemaker-devel-1.1.15-19.15 libpacemaker-devel-1.1.16-4.8 libpacemaker-devel-1.1.19+20180928.0d2680780-1.8 libpacemaker-devel-1.1.21+20190809.bf34b44fa-1.17 libpacemaker3 libpacemaker3-1.1.15+git20161104.b6f251a-1.1 libpacemaker3-1.1.21+20190809.bf34b44fa-1.17 pacemaker pacemaker-1.1.15+git20161104.b6f251a-1.1 pacemaker-1.1.21+20190809.bf34b44fa-1.17 pacemaker-cli pacemaker-cli-1.1.15+git20161104.b6f251a-1.1 pacemaker-cli-1.1.21+20190809.bf34b44fa-1.17 pacemaker-cts pacemaker-cts-1.1.12-7.1 pacemaker-cts-1.1.13-10.4 pacemaker-cts-1.1.15+git20161104.b6f251a-1.1 pacemaker-cts-1.1.15-19.15 pacemaker-cts-1.1.16-4.8 pacemaker-cts-1.1.19+20180928.0d2680780-1.8 pacemaker-cts-1.1.21+20190809.bf34b44fa-1.17 pacemaker-devel pacemaker-libs pacemaker-remote pacemaker-remote-1.1.15+git20161104.b6f251a-1.1 pacemaker-remote-1.1.21+20190809.bf34b44fa-1.17 libpacemaker3-1.1.21+20190809.bf34b44fa-1.17 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 pacemaker-1.1.21+20190809.bf34b44fa-1.17 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 pacemaker-cli-1.1.21+20190809.bf34b44fa-1.17 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 pacemaker-cts-1.1.21+20190809.bf34b44fa-1.17 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 pacemaker-remote-1.1.21+20190809.bf34b44fa-1.17 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libpacemaker-devel-1.1.12-7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 pacemaker-cts-1.1.12-7.1 as a component of SUSE Linux Enterprise Software Development Kit 12 libpacemaker-devel-1.1.13-10.4 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 pacemaker-cts-1.1.13-10.4 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 libpacemaker-devel-1.1.15-19.15 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 pacemaker-cts-1.1.15-19.15 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libpacemaker-devel-1.1.16-4.8 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 pacemaker-cts-1.1.16-4.8 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libpacemaker-devel-1.1.19+20180928.0d2680780-1.8 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 pacemaker-cts-1.1.19+20180928.0d2680780-1.8 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 libpacemaker-devel-1.1.21+20190809.bf34b44fa-1.17 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 pacemaker-cts-1.1.21+20190809.bf34b44fa-1.17 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libpacemaker-devel-1.1.15+git20161104.b6f251a-1.1 as a component of openSUSE Tumbleweed libpacemaker3-1.1.15+git20161104.b6f251a-1.1 as a component of openSUSE Tumbleweed pacemaker-1.1.15+git20161104.b6f251a-1.1 as a component of openSUSE Tumbleweed pacemaker-cli-1.1.15+git20161104.b6f251a-1.1 as a component of openSUSE Tumbleweed pacemaker-cts-1.1.15+git20161104.b6f251a-1.1 as a component of openSUSE Tumbleweed pacemaker-remote-1.1.15+git20161104.b6f251a-1.1 as a component of openSUSE Tumbleweed libpacemaker-devel as a component of SUSE Linux Enterprise High Availability Extension 15 libpacemaker3 as a component of SUSE Linux Enterprise High Availability Extension 15 pacemaker as a component of SUSE Linux Enterprise High Availability Extension 15 pacemaker-cli as a component of SUSE Linux Enterprise High Availability Extension 15 pacemaker-cts as a component of SUSE Linux Enterprise High Availability Extension 15 pacemaker-remote as a component of SUSE Linux Enterprise High Availability Extension 15 libpacemaker-devel as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 libpacemaker3 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 pacemaker as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 pacemaker-cli as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 pacemaker-cts as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 pacemaker-remote as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 cluster-glue as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 libglue-devel as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 libglue2 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 cluster-glue as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 cluster-glue-devel as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 cluster-glue-libs as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 pacemaker as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 pacemaker-cli as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 pacemaker-cts as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 pacemaker-devel as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 pacemaker-libs as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 pacemaker-remote as a component of SUSE Linux Enterprise High Availability Extension 15 SP5 stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer. CVE-2010-2496 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libpacemaker3-1.1.21+20190809.bf34b44fa-1.17 SUSE Linux Enterprise Server for SAP Applications 12 SP5:pacemaker-1.1.21+20190809.bf34b44fa-1.17 SUSE Linux Enterprise Server for SAP Applications 12 SP5:pacemaker-cli-1.1.21+20190809.bf34b44fa-1.17 SUSE Linux Enterprise Server for SAP Applications 12 SP5:pacemaker-cts-1.1.21+20190809.bf34b44fa-1.17 SUSE Linux Enterprise Server for SAP Applications 12 SP5:pacemaker-remote-1.1.21+20190809.bf34b44fa-1.17 SUSE Linux Enterprise Software Development Kit 12:libpacemaker-devel-1.1.12-7.1 SUSE Linux Enterprise Software Development Kit 12:pacemaker-cts-1.1.12-7.1 SUSE Linux Enterprise Software Development Kit 12 SP1:libpacemaker-devel-1.1.13-10.4 SUSE Linux Enterprise Software Development Kit 12 SP1:pacemaker-cts-1.1.13-10.4 SUSE Linux Enterprise Software Development Kit 12 SP2:libpacemaker-devel-1.1.15-19.15 SUSE Linux Enterprise Software Development Kit 12 SP2:pacemaker-cts-1.1.15-19.15 SUSE Linux Enterprise Software Development Kit 12 SP3:libpacemaker-devel-1.1.16-4.8 SUSE Linux Enterprise Software Development Kit 12 SP3:pacemaker-cts-1.1.16-4.8 SUSE Linux Enterprise Software Development Kit 12 SP4:libpacemaker-devel-1.1.19+20180928.0d2680780-1.8 SUSE Linux Enterprise Software Development Kit 12 SP4:pacemaker-cts-1.1.19+20180928.0d2680780-1.8 SUSE Linux Enterprise Software Development Kit 12 SP5:libpacemaker-devel-1.1.21+20190809.bf34b44fa-1.17 SUSE Linux Enterprise Software Development Kit 12 SP5:pacemaker-cts-1.1.21+20190809.bf34b44fa-1.17 openSUSE Tumbleweed:libpacemaker-devel-1.1.15+git20161104.b6f251a-1.1 openSUSE Tumbleweed:libpacemaker3-1.1.15+git20161104.b6f251a-1.1 openSUSE Tumbleweed:pacemaker-1.1.15+git20161104.b6f251a-1.1 openSUSE Tumbleweed:pacemaker-cli-1.1.15+git20161104.b6f251a-1.1 openSUSE Tumbleweed:pacemaker-cts-1.1.15+git20161104.b6f251a-1.1 openSUSE Tumbleweed:pacemaker-remote-1.1.15+git20161104.b6f251a-1.1 SUSE Linux Enterprise High Availability Extension 15 SP3:libpacemaker-devel SUSE Linux Enterprise High Availability Extension 15 SP3:libpacemaker3 SUSE Linux Enterprise High Availability Extension 15 SP3:pacemaker SUSE Linux Enterprise High Availability Extension 15 SP3:pacemaker-cli SUSE Linux Enterprise High Availability Extension 15 SP3:pacemaker-cts SUSE Linux Enterprise High Availability Extension 15 SP3:pacemaker-remote SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-glue SUSE Linux Enterprise High Availability Extension 15 SP4:libglue-devel SUSE Linux Enterprise High Availability Extension 15 SP4:libglue2 SUSE Linux Enterprise High Availability Extension 15 SP5:cluster-glue SUSE Linux Enterprise High Availability Extension 15 SP5:cluster-glue-devel SUSE Linux Enterprise High Availability Extension 15 SP5:cluster-glue-libs SUSE Linux Enterprise High Availability Extension 15 SP5:pacemaker SUSE Linux Enterprise High Availability Extension 15 SP5:pacemaker-cli SUSE Linux Enterprise High Availability Extension 15 SP5:pacemaker-cts SUSE Linux Enterprise High Availability Extension 15 SP5:pacemaker-devel SUSE Linux Enterprise High Availability Extension 15 SP5:pacemaker-libs SUSE Linux Enterprise High Availability Extension 15 SP5:pacemaker-remote SUSE Linux Enterprise High Availability Extension 15:libpacemaker-devel SUSE Linux Enterprise High Availability Extension 15:libpacemaker3 SUSE Linux Enterprise High Availability Extension 15:pacemaker SUSE Linux Enterprise High Availability Extension 15:pacemaker-cli SUSE Linux Enterprise High Availability Extension 15:pacemaker-cts SUSE Linux Enterprise High Availability Extension 15:pacemaker-remote important 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N