Race condition in pcsd in PCS 0.9.139 and previous versions uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
pacemaker\\/corosync configuration system project pacemaker\\/corosync configuration system |
Vulmon