CVE-2014-5247: The _UpgradeBeforeConfigurationChange function in lib/client/gnt_cluster.py in Ganeti 2.10.0 before 2.10.7...

Security readout for executives and security teams

Ganeti created a configuration backup during certain upgrade operations with permissions that local users could read. That backup could contain SSL keys, remote API credentials, and other sensitive cluster information. The issue is local, but exposure of cluster secrets can turn a low-privilege account into a serious operational compromise. Organizations are exposed if they run affected Ganeti versions and performed the relevant upgrade command on systems where non-administrative local users could read the backup file. Prioritize remediation for Ganeti clusters with shared local access or untrusted users. The issue is not remotely reachable by itself, but exposed cluster credentials can materially increase compromise impact. Mitigation focus: Upgrade Ganeti to 2.10.7, 2.11.5, or a later fixed release.; Follow Ganeti and oCERT guidance for this specific advisory.; Restrict local shell access on Ganeti cluster nodes to trusted administrators..

Prepared

Jun 14, 2026, 07:14 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.