Clusterlabs Pcs — known CVE vulnerabilities

Every CVE whose affected-product data names Clusterlabs Pcs, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2023-2319 — CVSS 9.8 (critical): It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to…
• CVE-2016-0720 — CVSS 8.8 (high): Cross-site request forgery (CSRF) vulnerability in pcsd web UI in pcs before 0.9.149.
• CVE-2022-1049 — CVSS 8.8 (high): A flaw was found in the Pacemaker configuration tool (pcs). The pcs daemon was allowing expired accounts, and accounts with expired…
• CVE-2016-0721 — CVSS 8.1 (high): Session fixation vulnerability in pcsd in pcs before 0.9.157.
• CVE-2022-2735 — CVSS 7.8 (high): A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal…
• CVE-2017-2661 — CVSS 6.1 (medium): ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field…