Pcs

This hub aggregates every CVE we track for Pcs, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Pcs.

• CVE-2023-2319It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS p...9.8May 17, 2023
• CVE-2022-2735A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happe...7.8Sep 6, 2022
• CVE-2022-1049A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unpr...8.8Mar 25, 2022
• CVE-2018-1079pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name f...8.7Apr 12, 2018
• CVE-2018-1086pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, po...4.3Apr 12, 2018
• CVE-2017-2661ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.6.1Mar 12, 2018
• CVE-2016-0720Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.8.8Apr 21, 2017
• CVE-2016-0721Session fixation vulnerability in pcsd in pcs before 0.9.157.8.1Apr 21, 2017