TI-2018-00998 CVE-2018-1079 · GHSA-wxjj-jh24-cx5f
Path traversal in pcs
Priority MEDIUM 40
pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call.
RHSA-2018:1060
pcs security update
Released 2018-04-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server High Availability (v. 7) pcs-0.9.162-5.el7_5.1, pcs-snmp-0.9.162-5.el7_5.1
- Red Hat Enterprise Linux Server Resilient Storage (v. 7) pcs-0.9.162-5.el7_5.1, pcs-snmp-0.9.162-5.el7_5.1
Fixes 3 records
TI-2018-01005 CVE-2018-1086 · GHSA-p9pc-vgv7-x9j9
Improper input validation in Red Hat pcs
Priority LOW 37
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass.
TI-2018-15772 CVE-2018-1000119 · GHSA-688c-3x49-6rqj
Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack…
Priority LOW 31
Sinatra rack-protection versions 1.5.4 and 2.0.0.rc3 and earlier contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed.