5 results · Feed
-
Medium 6.5
Pcs: pcs: non-root haclient users can read arbitrary files via pcs host auth --token
A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 2…
-
Unscored —
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for …
-
Unscored —
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts …
-
Medium 4.3
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd serv…
-
Unscored —
ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation…