CVE-2015-7945

The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

9.36% chance of exploitation in the next 30 days, 95th percentile

Published

2017-08-18

Updated

2024-08-06

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39169

References

• CVE Record
• NVD entry

Related

• CVE-2015-7944
• CVE-2015-7984
• CVE-2015-7904
• CVE-2015-7985
• CVE-2015-7903
• CVE-2015-7986