CVE-2018-1086
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST...
CVE-2018-1086 is a medium vulnerability (CVSS 4.3) in Redhat Pcs, published April 9, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.92%, the 79th percentile. Fixed in pcs 0.9.164-1.
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
- Record
CVE-2018-1086- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2018-11736
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
- Record
EUVD-2018-11736- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p9pc-vgv7-x9j9
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST...
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
- Record
GHSA-p9pc-vgv7-x9j9- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
- Record
CVE-2018-1086- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-20, CWE-200
- Updated
- 2026-11-02
OSV
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
- Record
CVE-2018-1086- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2018-1086
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
- Record
DEBIAN-CVE-2018-1086- CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 4 moreShow less
OSVRHSA-2018:1060
Red Hat Security Advisory: pcs security update
- Record
RHSA-2018:1060- CVSS 3.0
- 8.7 High
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2018:1927
Red Hat Security Advisory: pcs security update
- Record
RHSA-2018:1927- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2018-1086
pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.
- Record
UBUNTU-CVE-2018-1086- CVSS 3.0
- 4.3 Medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS 3.0
- 7.5 High
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVUSN-7614-1 No score
pcs vulnerabilities
Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive information or elevate their privileges. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-1086)
Ondrej Mular discovered that pcs did not correctly handle Unix socket permissions. An attacker could possibly use this issue to elevate their privileges. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-2735)
It was discovered that pcs did not correctly handle PAM authentication. An attacker could possibly use this issue to bypass authentication mechanisms. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-1049)
It was discovered that pcs did not correctly handle the validation of Node names. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-2661)
- Record
USN-7614-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
pcsDebian:12 |
before 0.9.164-1 | 0.9.164-1 |
pcsDebian:13 |
before 0.9.164-1 | 0.9.164-1 |
pcsDebian:14 |
before 0.9.164-1 | 0.9.164-1 |
pcsDebian:9 |
before 0.9.155+dfsg-2+deb9u1, plus listed versions 0.9.155+dfsg-2 |
0.9.155+dfsg-2+deb9u1 |
pcsRed Hat:enterprise_linux:7::server |
before 0:0.9.162-5.el7_5.1 | 0:0.9.162-5.el7_5.1 |
pcs-debuginfoRed Hat:enterprise_linux:7::server |
before 0:0.9.162-5.el7_5.1 | 0:0.9.162-5.el7_5.1 |
pcs-snmpRed Hat:enterprise_linux:7::server |
before 0:0.9.162-5.el7_5.1 | 0:0.9.162-5.el7_5.1 |
pcsRed Hat:enterprise_linux:6::server |
before 0:0.9.155-3.el6 | 0:0.9.155-3.el6 |
pcs-debuginfoRed Hat:enterprise_linux:6::server |
before 0:0.9.155-3.el6 | 0:0.9.155-3.el6 |
pcsUbuntu:Pro:16.04:LTS |
before 0.9.149-1ubuntu1.1+esm1, plus listed versions 0.9.149-10.9.149-1ubuntu10.9.149-1ubuntu1.1 |
0.9.149-1ubuntu1.1+esm1 |
pcsUbuntu:Pro:20.04:LTS |
before 0.10.4-3ubuntu0.1~esm1, plus listed versions 0.10.2-10.10.4-20.10.4-2ubuntu10.10.4-3 |
0.10.4-3ubuntu0.1~esm1 |
pcsUbuntu:Pro:22.04:LTS |
before 0.10.11-2ubuntu3+esm1, plus listed versions 0.10.8-1ubuntu10.10.11-2ubuntu20.10.11-2ubuntu3 |
0.10.11-2ubuntu3+esm1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1086
access.redhat.com/errata/RHSA-2018:1060
debian.org/security/2018/dsa-4169
nvd.nist.gov/vuln/detail/CVE-2018-1086
github.com/advisories/GHSA-p9pc-vgv7-x9j9
Show 23 moreShow less
security-tracker.debian.org/tracker/CVE-2018-1086
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1060.json
cve.org/CVERecord?id=CVE-2018-1079
ubuntu.com/security/CVE-2018-1086
openwall.com/lists/oss-security/2018/04/09/2