Vulnerability Details CVE-2015-5190
The pcsd web UI in PCS 0.9.139 and earlier allows remote authenticated users to execute arbitrary commands via "escape characters" in a URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.4%
CVSS Severity
CVSS v2 Score 8.5
References
Products affected by CVE-2015-5190
-
Pacemaker/corosync Configuration System Project » Pacemaker/corosync Configuration System » Version: Anycpe:2.3:a:pacemaker/corosync_configuration_system_project:pacemaker/corosync_configuration_system:*