Clusterlabs Fence Agents vulnerabilities

2 vulnerabilities

Known vulnerabilities in Clusterlabs Fence Agents, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2014-0104clusterlabsfence-agents+3
EPSS score
0.83%
In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary SSL certificates.5CVE-2019-10153clusterlabsfence-agents+57
EPSS score
2.17%
A flaw was discovered in fence-agents, prior to version 4.3.4, where using non-ASCII characters in a guest VM's comment or other fields would cause fence_rhevm to exit with an exception. In cluster environments, this could lead to preventing automated recovery or otherwise denying service to clusters of which that VM is a member.