medium4.9
CVE-2015-5189
Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by s…
Impact
Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pacemaker\/Corosync Configuration System Project | Pacemaker\/Corosync Configuration System | through 0.9.139 |