CVE-2015-5190

The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL.

Score

CVSS 2.0 8.5 High

Status

Modified - secalert@redhat.com

Published

2015-09-03

Last modified

2024-08-06

Weaknesses

CWE-77

Affected products

• Pacemaker/corosync Configuration System (Pacemaker/corosync Configuration System Project)

References

• http://rhn.redhat.com/errata/RHSA-2015-1700.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1252813