CVE-2015-5189 Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for secu...
MediumCVSS 4.9
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pacemakercorosync configuration system project pacemakercorosync configuration system | <= 0.9.139 | No fix listed |
References
- RHSA-2015:1700 vendor-advisory
- bugzilla.redhat.com
- Debian Security Tracker CVE-2015-5189 vendor-advisory