CVE-2015-7945
HighSummary
The RESTful control interface (RAPI) in Ganeti before version 2.9.7 and in versions 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to further attacks on the organization's infrastructure.
Recommendation
It is recommended to update Ganeti to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in Ganeti
Original NVD description (English source)
The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.x before 2.15.2 allows remote attackers to obtain the DRBD secret via instance information job results.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS