Veracode Vulnerability DatabaseVERACODE:17660Session Fixation
0.005 Low
EPSS
Percentile
75.7%
pcsd in pcs is vulnerable to Session Fixation. Failing to validate cookies on the server side when a user is logged out, could potentially allow an attacker to perform session fixation attacks on pcsd in order to impersonate another user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pcs | eq | 0.9.137__13.el7_1.2 | |
| pcs | eq | 0.9.137__13.el7_1.2 |
References
lists.fedoraproject.org/pipermail/package-announce/2016-March/178261.html
lists.fedoraproject.org/pipermail/package-announce/2016-March/178384.html
rhn.redhat.com/errata/RHSA-2016-2596.html
www.securityfocus.com/bid/97977
access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.3_Release_Notes/index.html
access.redhat.com/errata/RHSA-2016:2596
access.redhat.com/security/cve/CVE-2016-0721
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1158500
bugzilla.redhat.com/show_bug.cgi?id=1164402
bugzilla.redhat.com/show_bug.cgi?id=1207405
bugzilla.redhat.com/show_bug.cgi?id=1219581
bugzilla.redhat.com/show_bug.cgi?id=1220512
bugzilla.redhat.com/show_bug.cgi?id=1225423
bugzilla.redhat.com/show_bug.cgi?id=1225946
bugzilla.redhat.com/show_bug.cgi?id=1229822
bugzilla.redhat.com/show_bug.cgi?id=1231858
bugzilla.redhat.com/show_bug.cgi?id=1248990
bugzilla.redhat.com/show_bug.cgi?id=1249085
bugzilla.redhat.com/show_bug.cgi?id=1252050
bugzilla.redhat.com/show_bug.cgi?id=1264360
bugzilla.redhat.com/show_bug.cgi?id=1269242
bugzilla.redhat.com/show_bug.cgi?id=1281364
bugzilla.redhat.com/show_bug.cgi?id=1281371
bugzilla.redhat.com/show_bug.cgi?id=1281391
bugzilla.redhat.com/show_bug.cgi?id=1286664
bugzilla.redhat.com/show_bug.cgi?id=1287320
bugzilla.redhat.com/show_bug.cgi?id=1290512
bugzilla.redhat.com/show_bug.cgi?id=1298585
bugzilla.redhat.com/show_bug.cgi?id=1299615
bugzilla.redhat.com/show_bug.cgi?id=1299847
bugzilla.redhat.com/show_bug.cgi?id=1301993
bugzilla.redhat.com/show_bug.cgi?id=1302010
bugzilla.redhat.com/show_bug.cgi?id=1303136
bugzilla.redhat.com/show_bug.cgi?id=1305786
bugzilla.redhat.com/show_bug.cgi?id=1315357
bugzilla.redhat.com/show_bug.cgi?id=1315652
bugzilla.redhat.com/show_bug.cgi?id=1315743
bugzilla.redhat.com/show_bug.cgi?id=1327739
bugzilla.redhat.com/show_bug.cgi?id=1328066
bugzilla.redhat.com/show_bug.cgi?id=1329472
bugzilla.redhat.com/show_bug.cgi?id=1341114
bugzilla.redhat.com/show_bug.cgi?id=1346852
bugzilla.redhat.com/show_bug.cgi?id=1349465
bugzilla.redhat.com/show_bug.cgi?id=1354498
bugzilla.redhat.com/show_bug.cgi?id=1357945
bugzilla.redhat.com/show_bug.cgi?id=1359154
bugzilla.redhat.com/show_bug.cgi?id=1366307
github.com/ClusterLabs/pcs/commit/acdbbe8307e6f4a36b2c7754765e732e43fe8d17
github.com/ClusterLabs/pcs/commit/bc6ad9086857559db57f4e3e6de66762291c0774
github.com/ClusterLabs/pcs/commit/e9b28833d54a47ec441f6dbad0db96e1fc662a5b
rhn.redhat.com/errata/RHSA-2016-2596.html
Related
