Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2018-1086

pcs: Debug parameter removal bypass, allowing information disclosure

pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.

CVSS 3.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Clusterlabs Debian Redhat
Products
Pacemaker Command Line Interface Debian Linux Enterprise Linux and 1 more
CVE-2018-1079

pcs: Privilege escalation via authorized user malicious REST call

pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/put_file query. If the /etc/booth directory exists, an authenticated attacker with write permissions could create or overwrite arbitrary files with arbitrary data outside of the /etc/booth directory, in the context of the pcsd process.

CVSS 3.0 · 8.7 High EPSS 1.1% KEV · Not listed
Vendors
Clusterlabs Redhat
Products
Pacemaker Command Line Interface Enterprise Linux