Pacemaker Command Line Interface (Clusterlabs) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 158 known versions, newest CVE from 2018-04-12. Vendor: Clusterlabs.

CVEs of Pacemaker Command Line Interface

• CVE-2018-1079 - CVSS 8.7 (high), 2018-04-12: pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service…
• CVE-2018-1086 - CVSS 7.5 (high), 2018-04-12: pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs…