Red Hat Security AdvisoryRHSA-2024:10987
pcs security update
Released 2024-12-12 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux HighAvailability (v. 8) pcs-0.10.18-2.el8_10.3, pcs-snmp-0.10.18-2.el8_10.3
- Red Hat Enterprise Linux ResilientStorage (v. 8) pcs-0.10.18-2.el8_10.3, pcs-snmp-0.10.18-2.el8_10.3
Fixes 1 record
Priority LOW 25
Versions of the package sinatra from 0.0.0 are vulnerable to Reliance on Untrusted Inputs in a Security Decision via the X-Forwarded-Host (XFH) header.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00494 · Published 2024-11-01 · Partial fix · 4.1.0 CWE-807
