Description
Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.
References (6)
Core 6
Core References
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1299614
Issue Tracking, Patch x_refsource_confirm
https://github.com/ClusterLabs/pcs/commit/b9e7f061788c3b86a0c67d2d4158f067ec5eb625
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178384.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/97984
Third Party Advisory vendor-advisory
x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2016-2596.html
Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178261.html
Scores
CVSS v3
8.8
EPSS
0.0141
EPSS Percentile
69.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-352
Status
published
Products (4)
clusterlabs/pcs
< 0.9.148
fedoraproject/fedora
22
fedoraproject/fedora
23
redhat/enterprise_linux
7.0
Published
Apr 21, 2017
Tracked Since
Feb 18, 2026