Red Hat Security AdvisoryRHSA-2015:0990
pcs security and bug fix update
Released 2015-05-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux High Availability (v. 6) pcs-0.9.123-9.el6_6.2
- Red Hat Enterprise Linux Resilient Storage (v. 6) pcs-0.9.123-9.el6_6.2
Fixes 2 records
Priority LOW 35
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02407 · Published 2015-05-14 · Fixed CWE-310
Priority LOW 24
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02082 · Published 2015-05-14 · Fixed CWE-310
