Pcs vulnerabilities

2 known vulnerabilities in Pcs from Clusterlabs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  ClusterLabs/pcs: Incorrect Default Permissions

  CVE-2022-2735Sep 6, 2022ClusterLabs/pcs

  A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. Wi

• 8.8 High severity

  clusterlabs/pcs: Improper Authentication

  CVE-2022-1049Mar 25, 2022ClusterLabs/pcsEPSS 1.97%

  A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using PAM authentication. Therefore, unprivileged expired accounts that have been denied access could st