{"id":"CVE-2018-1086","aliases":["DEBIAN-CVE-2018-1086","DSA-4169-1","EUVD-2018-11736","GHSA-p9pc-vgv7-x9j9","RHSA-2018:1060","RHSA-2018:1927","UBUNTU-CVE-2018-1086","USN-7614-1"],"status":"published","title":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST...","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01916,"percentile":0.80006,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-200"],"published":"2018-04-09T00:00:00Z","modified":"2026-10-24T10:31:06Z","fixes":[{"ecosystem":"Debian:12","package":"pcs","fixed_in":["0.9.164-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"pcs","fixed_in":["0.9.164-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"pcs","fixed_in":["0.9.164-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"pcs","fixed_in":["0.9.155+dfsg-2+deb9u1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"pcs","fixed_in":["0:0.9.155-3.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"pcs-debuginfo","fixed_in":["0:0.9.155-3.el6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pcs","fixed_in":["0.9.149-1ubuntu1.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.164-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.164-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.164-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.155+dfsg-2+deb9u1"}]}],"versions":["0.9.155+dfsg-2"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.162-5.el7_5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pcs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.162-5.el7_5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"pcs-snmp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.162-5.el7_5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.155-3.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"pcs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.155-3.el6"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.149-1ubuntu1.1+esm1"}]}],"versions":["0.9.149-1","0.9.149-1ubuntu1","0.9.149-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.149-1ubuntu1.1+esm1"}]}],"versions":["0.9.149-1","0.9.149-1ubuntu1","0.9.149-1ubuntu1.1"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.4-3ubuntu0.1~esm1"}]}],"versions":["0.10.2-1","0.10.4-2","0.10.4-2ubuntu1","0.10.4-3"],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"pcs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.11-2ubuntu3+esm1"}]}],"versions":["0.10.8-1ubuntu1","0.10.11-2ubuntu2","0.10.11-2ubuntu3"],"bundled":4}],"products":[{"vendor":"clusterlabs","product":"pacemaker_command_line_interface"},{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"pcs"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1086","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1060","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1927","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4169","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1086","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p9pc-vgv7-x9j9"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1086","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1534027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1550243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1557366","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1060.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1079","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1079","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1079","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1086","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1086","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1000119","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1000119","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000119","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_release_notes/index.html","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/6/html/6.10_technical_notes/index.html","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1927.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1086","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2018/04/09/2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-7614-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-2661","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-1049","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-2735","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-1086","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","status":"published","published":"2018-04-12T16:00:00Z","modified":"2024-08-05T03:51:48.471Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:08.701206Z"}],"euvd":[{"id":"EUVD-2018-11736","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","status":"published","published":"2018-04-12T16:00:00Z","modified":"2024-08-05T03:51:48Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T02:40:16.874515Z"}],"ghsa":[{"id":"GHSA-p9pc-vgv7-x9j9","title":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST...","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","status":"published","published":"2022-05-13T01:33:32Z","modified":"2023-02-01T05:08:13Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:42.874485Z"}],"nvd":[{"id":"CVE-2018-1086","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","status":"published","published":"2018-04-12T16:29:00.417Z","modified":"2026-06-17T01:50:26.897Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20","CWE-200"],"updated_at":"2026-11-02T14:04:25.506659Z"}],"osv":[{"id":"CVE-2018-1086","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","status":"published","published":"2018-04-12T16:29:00.417Z","modified":"2026-10-24T10:31:06.771759499Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-1086","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","status":"published","published":"2018-04-12T16:29:00.417Z","modified":"2026-10-23T18:04:46.519247364Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"RHSA-2018:1060","title":"Red Hat Security Advisory: pcs security update","status":"published","published":"2024-09-18T04:07:54Z","modified":"2026-07-01T10:03:35Z","cvss":[{"version":"3.0","score":8.7,"vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1927","title":"Red Hat Security Advisory: pcs security update","status":"published","published":"2024-09-16T01:04:15Z","modified":"2026-07-01T10:03:57Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-1086","description":"pcs before versions 0.9.164 and 0.10 is vulnerable to a debug parameter removal bypass. REST interface of the pcsd service did not properly remove the pcs debug argument from the /run_pcs query, possibly disclosing sensitive information. A remote attacker with a valid token could use this flaw to elevate their privilege.","status":"published","published":"2018-04-12T16:29:00Z","modified":"2026-02-04T02:29:29.135288Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"medium"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DSA-4169-1","title":"pcs - security update","status":"published","published":"2018-04-09T00:00:00Z","modified":"2026-03-09T01:23:12.596688Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"USN-7614-1","title":"pcs vulnerabilities","description":"Cedric Buissart discovered that pcs did not correctly handle certain\nparameters. An attacker could possibly use this issue to leak sensitive\ninformation or elevate their privileges. This issue only affected\nUbuntu 16.04 LTS. (CVE-2018-1086)\n\nOndrej Mular discovered that pcs did not correctly handle Unix socket\npermissions. An attacker could possibly use this issue to elevate their\nprivileges. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-2735)\n\nIt was discovered that pcs did not correctly handle PAM authentication.\nAn attacker could possibly use this issue to bypass authentication\nmechanisms. This issue only affected Ubuntu 20.04 LTS and \nUbuntu 22.04 LTS. (CVE-2022-1049)\n\nIt was discovered that pcs did not correctly handle the validation of\nNode names. An attacker could possibly use this issue to execute a\ncross-site scripting (XSS) attack. This issue only affected\nUbuntu 16.04 LTS. (CVE-2017-2661)","status":"published","published":"2025-07-02T08:20:20Z","modified":"2026-06-25T13:32:30.540071415Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}