TI-2018-00998 CVE-2018-1079 · GHSA-wxjj-jh24-cx5f
Path traversal in pcs
Priority MEDIUM 40
pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call.
No ClusterLabs vulnerabilities are listed in CISA KEV.
2 records in Pacemaker Command Line Interface · all components
pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call.
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass.