CVE-2018-1086 pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possi...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/pcs(Debian:12) | < 0.9.164-1 | 0.9.164-1 |
| debian/pcs(Debian:13) | < 0.9.164-1 | 0.9.164-1 |
| debian/pcs(Debian:14) | < 0.9.164-1 | 0.9.164-1 |
| clusterlabs pacemaker command line interface | = 0.9.164 | No fix listed |
| clusterlabs pacemaker command line interface | = 0.10 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| redhat enterprise linux server eus | = 7.5 | No fix listed |
| redhat enterprise linux server eus | = 7.6 | No fix listed |
| redhat/pcs | = pcs 0.9.164 | No fix listed |
| redhat/pcs | = pcs 0.10 | No fix listed |
References
- Debian Security Tracker CVE-2018-1086 vendor-advisory
- RHSA-2018:1060 third-party-advisory vendor-advisory
- RHSA-2018:1927 third-party-advisory vendor-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- DSA-4169 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking