Approved changes feed: RSS · Atom

cpe:2.3:a:clusterlabs:cluster_glue:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorClusterlabs (39a9ebdb-0284-5cdd-a5e6-af877468e529)
ProductCluster Glue (4b662d47-9606-5a51-9816-5cb66af2ac4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/clusterlabs/cluster-glue purl2cpe 2026-06-01 10:17:27.400282
pkg:rpm/opensuse/cluster-glue purl2cpe 2026-06-01 10:17:27.400285

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2496 vulnerable 2026-06-08 04:55:08.280991 Details available
stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.
Published: 2021-10-18T12:12:42.000Z
Updated: 2024-08-07T02:32:16.898Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.