Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2017-2661

Published: 12/03/2018 Updated: 09/10/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Clusterlabs

Vulnerability Summary

ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.

Vulnerable Product Search on Vulmon Subscribe to Product

clusterlabs pcs

Vendor Advisories

Debian CVElist Bug Report Logs: pcs: CVE-2017-2661: Improper node name field validation when creating clusters leads to XSS
Debian Bug report logs - #858379 pcs: CVE-2017-2661: Improper node name field validation when creating clusters leads to XSS Package: src:pcs; Maintainer for src:pcs is Debian HA Maintainers <debian-ha-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Tue, 21 Mar 2017 18 ...

References

CWE-79https://github.com/ClusterLabs/pcs/commit/1874a769b5720ae5430f10c6cedd234430bc703fhttps://bugzilla.redhat.com/show_bug.cgi?id=1428948https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=858379https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook