CVE-2015-5189
03.09.2015, 14:59
Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.
| Vendor | Product | Version |
|---|---|---|
| pacemaker\/corosync_configuration_system_project | pacemaker\/corosync_configuration_system | 𝑥 ≤ 0.9.139 |
𝑥
= Vulnerable software versions
Debian Releases