{
  "cveId": "CVE-2020-25654",
  "url": "https://patchblox.com/security/cve/CVE-2020-25654",
  "summary": "CVE-2020-25654 is fixed in 32 products on 1 platform, first by libcib27 2.0.3-3ubuntu4.1, released October 26, 2020. It is not reported as exploited. Patch Radar priority: High.",
  "title": "pacemaker-cli: The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity an...",
  "description": "The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures. \n\nSecurity Fix(es):\n\n* pacemaker: ACL restrictions bypass (CVE-2020-25654)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "published": "2020-10-26T17:00:00Z",
  "severity": "Moderate",
  "cvss": 7.2,
  "epss": 0.01868,
  "epssPercentile": 0.79449,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libcib27",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libcib27 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libcib27-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcib4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libcib4 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcib4-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmcluster29",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libcrmcluster29 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libcrmcluster29-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmcluster4",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libcrmcluster4 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcrmcluster4-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmcommon3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libcrmcommon3 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcrmcommon3-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmcommon34",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libcrmcommon34 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libcrmcommon34-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmservice28",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libcrmservice28 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libcrmservice28-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libcrmservice3",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libcrmservice3 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libcrmservice3-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "liblrmd1",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "liblrmd1 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-liblrmd1-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "liblrmd28",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "liblrmd28 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-liblrmd28-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpacemaker1",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libpacemaker1 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpacemaker1-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpe-rules2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libpe-rules2 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpe-rules2-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpe-rules26",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libpe-rules26 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpe-rules26-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpe-status10",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libpe-status10 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpe-status10-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpe-status28",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libpe-status28 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libpe-status28-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libpengine10",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libpengine10 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libpengine10-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libstonithd2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libstonithd2 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libstonithd2-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libstonithd26",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "libstonithd26 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-libstonithd26-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "libtransitioner2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "libtransitioner2 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libtransitioner2-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "pacemaker 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "pacemaker 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-pacemaker-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cli",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cli-utils",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "pacemaker-cli-utils 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-cli-utils-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cli-utils",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "pacemaker-cli-utils 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-pacemaker-cli-utils-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cluster-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cluster-libs",
      "release": "ol 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "ELSA-2020-5487",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5487",
      "released": "2020-12-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "pacemaker-common 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-common-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-common",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "pacemaker-common 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-pacemaker-common-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-cts",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-doc",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-libs",
      "release": "ol 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "ELSA-2020-5487",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5487",
      "released": "2020-12-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-libs-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-nagios-plugins-metadata",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-remote",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-remote",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "pacemaker-remote 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-remote-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-remote",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "pacemaker-remote 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-pacemaker-remote-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-resource-agents",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.1.18-0ubuntu1.3",
      "fix": "pacemaker-resource-agents 1.1.18-0ubuntu1.3",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-pacemaker-resource-agents-1.1.18-0ubuntu1.3",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-resource-agents",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "2.0.3-3ubuntu4.1",
      "fix": "pacemaker-resource-agents 2.0.3-3ubuntu4.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-pacemaker-resource-agents-2.0.3-3ubuntu4.1",
      "released": "2020-10-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-schemas",
      "release": "RHEL 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "RHSA-2020:5487",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2020-5487",
      "released": "2020-12-15T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "pacemaker-schemas",
      "release": "ol 8",
      "fixedVersion": "0:2.0.4-6.el8_3.1",
      "fix": "ELSA-2020-5487",
      "url": "https://patchblox.com/security/fix/linux/elsa-2020-5487",
      "released": "2020-12-22T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}