ClusterLabs/pcs vulnerabilities
We track 2 vulnerabilities in ClusterLabs/pcs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 6, 2022.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest ClusterLabs/pcs vulnerabilities
- 7.8 High severity
ClusterLabs/pcs: Incorrect Default Permissions
A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. Wi
- 8.8 High severity
clusterlabs/pcs: Improper Authentication
A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could st