Vendors / Pacemaker/corosync Configuration System Project Pacemaker/corosync Configuration System Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Pacemaker/corosync Configuration System Project records in CISA KEV No Pacemaker/corosync Configuration System Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 2 records in Pacemaker/corosync Configuration System · all components
Priority MEDIUM 42
The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL.
CVSS 2.0 HIGH 8.5· Network · Low privileges · Interaction — · EPSS 0.02544 · Published 2015-09-03 · Fixed CWE-77
Priority LOW 24
Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another u…
CVSS 2.0 MEDIUM 4.9· Network · Low privileges · Interaction — · EPSS 0.0098 · Published 2015-09-03 · Fixed CWE-362
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0