CVE-2018-1086: Infoleak
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /runpcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
Other sources
To prevent some information disclosure, pcsd actively removes '--debug' from command requested over the REST interface, but this can be bypassed: ----8<--- 235 # do not reveal potentialy sensitive information 236 commanddecoded.delete('--debug') ---->8----
The information gained could then be used to gain higher privileges.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-1086.
What is the severity of CVE-2018-1086?
The severity of CVE-2018-1086 is high with a severity value of 7.5.
Which software versions are affected by CVE-2018-1086?
pcs versions 0.9.164 and 0.10 are affected by CVE-2018-1086.
How can the vulnerability be exploited?
A remote attacker with a valid token can exploit this vulnerability by using the flaw in the pcs debug argument removal from the /run_pcs query in the REST interface of the pcsd service.
What is the recommended remedy for CVE-2018-1086?
The recommended remedy for CVE-2018-1086 is to upgrade to versions 0.9.164 or 0.10.