Medium severity4.3NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026
CVE-2018-1086
CVE-2018-1086
Description
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- redhat/pcsv5Range: pcs 0.9.164
cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.164:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.9.164:*:*:*:*:*:*:*
- cpe:2.3:a:clusterlabs:pacemaker_command_line_interface:0.10:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- access.redhat.com/errata/RHSA-2018:1060nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2018:1927nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- www.debian.org/security/2018/dsa-4169nvdThird Party Advisory
News mentions
0No linked articles in our index yet.