Description
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-3431-1 | ganeti security update |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-06T08:06:31.127Z
Reserved: 2015-10-23T00:00:00.000Z
Link: CVE-2015-7945
No data.
Status : Deferred
Published: 2017-08-18T17:29:01.327
Modified: 2025-04-20T01:37:25.860
Link: CVE-2015-7945
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA