What is CVE-2015-5189?

CVE-2015-5189 is a vulnerability in Pacemaker\/corosync Configuration System Project, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2015-09-03.

Is CVE-2015-5189 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Pacemaker\/corosync Configuration System Project

CVE-2015-5189

Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.

Vulnerability class: Race Condition

EPSS: 0.010 (58.6th percentile) — read the EPSS interpretation.

Affected products

Pacemaker\/corosync_configuration_system_project Pacemaker\/corosync_configuration_system
N/a — versions n/a

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2015-5189

References

secalert@redhat.com (x_refsource_CONFIRM)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)

Frequently asked questions

What is CVE-2015-5189?: CVE-2015-5189 is a vulnerability in Pacemaker\/corosync Configuration System Project, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). Published 2015-09-03.
Is CVE-2015-5189 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.