SecuritySpace - CVE-2018-1079

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-1079

Description: pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/put_file query. If the /etc/booth directory exists, an authenticated attacker with write permissions could create or overwrite arbitrary files with arbitrary data outside of the /etc/booth directory, in the context of the pcsd process.

Test IDs: 1.3.6.1.4.1.25623.1.0.882895

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-1079
https://access.redhat.com/errata/RHSA-2018:1060
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1079

CVE ID:	CVE-2018-1079
Description:	pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/put_file query. If the /etc/booth directory exists, an authenticated attacker with write permissions could create or overwrite arbitrary files with arbitrary data outside of the /etc/booth directory, in the context of the pcsd process.
Test IDs:	1.3.6.1.4.1.25623.1.0.882895
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-1079 https://access.redhat.com/errata/RHSA-2018:1060 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1079