CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1079

pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/put_file query. If the /etc/booth directory exists, an authenticated attacker with write permissions could create or overwrite arbitrary files with arbitrary data outside of the /etc/booth directory, in the context of the pcsd process.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.5%

CVSS Severity

CVSS v3 Score 8.7

CVSS v2 Score 4.0

References

Products affected by CVE-2018-1079

Clusterlabs » Pacemaker Command Line Interface » Version: 0.10

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.10
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.100

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.100
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.101

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.101
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.102

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.102
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.103

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.103
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.104

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.104
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.105

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.105
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.106

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.106
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.107

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.107
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.108

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.108
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.109

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.109
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.110

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.110
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.111

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.111
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.112

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.112
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.113

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.113
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.114

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.114
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.115

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.115
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.116

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.116
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.117

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.117
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.118

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.118
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.119

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.119
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.120

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.120
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.121

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.121
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.122

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.122
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.123

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.123
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.124

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.124
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.125

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.125
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.126

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.126
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.127

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.127
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.128

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.128
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.129

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.129
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.130

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.130
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.131

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.131
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.132

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.132
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.134

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.134
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.135

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.135
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.136

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.136
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.137

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.137
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.138

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.138
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.139

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.139
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.140

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.140
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.141

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.141
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.142

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.142
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.143

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.143
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.144

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.144
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.145

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.145
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.146

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.146
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.147

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.147
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.148

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.148
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.149

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.149
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.150

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.150
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.151

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.151
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.152

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.152
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.153

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.153
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.154

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.154
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.155

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.155
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.156

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.156
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.157

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.157
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.158

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.158
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.159

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.159
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.160

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.160
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.161

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.161
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.162

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.162
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.163

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.163
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.164

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.164
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.2

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.2
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.3

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.3
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.3.1

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.3.1
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.30

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.30
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.31

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.31
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.32

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.32
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.34

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.34
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.35

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.35
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.36

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.36
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.37

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.37
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.38

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.38
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.39

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.39
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.4

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.4
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.40

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.40
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.41

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.41
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.42

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.42
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.43

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.43
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.44

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.44
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.45

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.45
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.46

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.46
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.47

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.47
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.48

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.48
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.49

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.49
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.5

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.5
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.50

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.50
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.51

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.51
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.52

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.52
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.53

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.53
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.54

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.54
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.55

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.55
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.56

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.56
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.57

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.57
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.58

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.58
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.59

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.59
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.6

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.6
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.60

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.60
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.61

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.61
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.62

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.62
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.63

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.63
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.64

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.64
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.65

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.65
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.66

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.66
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.67

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.67
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.68

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.68
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.69

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.69
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.7

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.7
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.70

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.70
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.71

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.71
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.72

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.72
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.73

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.73
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.74

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.74
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.75

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.75
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.76

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.76
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.77

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.77
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.78

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.78
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.79

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.79
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.8

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.8
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.80

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.80
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.81

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.81
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.82

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.82
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.83

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.83
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.84

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.84
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.85

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.85
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.86

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.86
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.87

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.87
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.88

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.88
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.89

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.89
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.9

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.9
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.90

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.90
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.91

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.91
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.92

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.92
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.93

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.93
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.94

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.94
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.95

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.95
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.96

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.96
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.97

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.97
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.98

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.98
Clusterlabs » Pacemaker Command Line Interface » Version: 0.9.99

cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.99
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux » Version: 7.5

cpe:2.3:o:redhat:enterprise_linux:7.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1079

Products

Pricing

Contact Us