CVE-2016-7035

An authorization flaw was found in Pacemaker before 1.1.16, where it did not properly guard its IPC interface. An attacker with an unprivileged account on a Pacemaker node could use this flaw to, for example, force the Local Resource Manager daemon to execute a script as root and thereby gain root access on the machine.

• CWE-285
• CWE-285

• http://rhn.redhat.com/errata/RHSA-2016-2614.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2675.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/03/5Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94214Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7035Issue Tracking, Third Party Advisory
• https://github.com/ClusterLabs/pacemaker/commit/5d71e65049Third Party Advisory
• https://lists.clusterlabs.org/pipermail/users/2016-November/004432.htmlMailing List, Vendor Advisory
• https://security.gentoo.org/glsa/201710-08Third Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2614.htmlThird Party Advisory
• http://rhn.redhat.com/errata/RHSA-2016-2675.htmlThird Party Advisory
• http://www.openwall.com/lists/oss-security/2016/11/03/5Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94214Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-7035Issue Tracking, Third Party Advisory
• https://github.com/ClusterLabs/pacemaker/commit/5d71e65049Third Party Advisory
• https://lists.clusterlabs.org/pipermail/users/2016-November/004432.htmlMailing List, Vendor Advisory
• https://security.gentoo.org/glsa/201710-08Third Party Advisory

Published

Sep 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7029Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-7030FreeIPA uses a default password policy that locks an account…
• CVE-2016-7031The RGW code in Ceph before 10.0.1, when authenticated-read …
• CVE-2016-7032sudo_noexec.so in Sudo before 1.8.15 on Linux might allow lo…
• CVE-2016-7033Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2016-7034The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not pr…
• CVE-2016-7036python-jose before 1.3.2 allows attackers to have unspecifie…
• CVE-2016-7037The verify function in Encryption/Symmetric.php in Malcolm F…
• CVE-2016-7038In Moodle 2.x and 3.x, web service tokens are not invalidate…
• CVE-2016-7039The IP stack in the Linux kernel through 4.8.2 allows remote…7.5
• CVE-2016-7040Red Hat CloudForms Management Engine 4.1 does not properly h…
• CVE-2016-7041Drools Workbench contains a path traversal vulnerability. Th…6.5