Lucene search
K

4 matches found

SUSE CVE
SUSE CVE
added 2023/10/31 2:40 a.m.3 views

SUSE CVE-2018-1079

pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/putfile query. If the /etc/booth directory exists, an authenticated attacker with...

6.5CVSS7.1AI score0.00408EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2018/04/12 5:29 p.m.20 views

CVE-2018-1079

pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/putfile query. If the /etc/booth directory exists, an authenticated attacker with...

8.7CVSS7AI score0.00408EPSS
Exploits0References2
OSV
OSV
added 2018/04/12 5:29 p.m.0 views

DEBIAN-CVE-2018-1079

pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/putfile query. If the /etc/booth directory exists, an authenticated attacker with...

6.5CVSS7.1AI score0.00408EPSS
Exploits0References1
Prion
Prion
added 2018/04/12 5:29 p.m.19 views

Privilege escalation

pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/putfile query. If the /etc/booth directory exists, an authenticated attacker with...

4CVSS6.7AI score0.00408EPSS
Exploits0References2Affected Software2
Rows per page
Query Builder