8 results · Feed
-
Medium 6.5
Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token
A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 2…
-
Unscored —
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for …
-
Unscored —
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts …
-
High 8.7
pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. Th…
-
Medium 4.3
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd serv…
-
Unscored —
ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.
-
Unscored —