Medium severity4.3NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026
CVE-2018-1086
CVE-2018-1086
Description
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- redhat/pcsv5Range: pcs 0.9.164
Patches
Vulnerability mechanics
References
4- access.redhat.com/errata/RHSA-2018:1060nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2018:1927nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- www.debian.org/security/2018/dsa-4169nvdThird Party Advisory
News mentions
0No linked articles in our index yet.