CVE-2015-5189

Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.

Score

CVSS 2.0 4.9 Medium

Status

Modified - secalert@redhat.com

Published

2015-09-03

Last modified

2024-08-06

Weaknesses

CWE-362

Affected products

• Pacemaker/corosync Configuration System (Pacemaker/corosync Configuration System Project)

References

• http://rhn.redhat.com/errata/RHSA-2015-1700.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1252805