Session fixation vulnerability in pcsd in pcs before 0.9.157.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - pcs: Cross-Site Request Forgery in web UI (CVE-2016-0720)

  - Session fixation vulnerability in pcsd in pcs before 0.9.157. (CVE-2016-0721)

  - ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to     improper validation of Node name field when creating new cluster or adding existing cluster.
    (CVE-2017-2661)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The following packages have been upgraded to a newer upstream version:
pcs (0.9.152).

Security Fix(es) :

  - A Cross-Site Request Forgery (CSRF) flaw was found in     the pcsd web UI. A remote attacker could provide a     specially crafted web page that, when visited by a user     with a valid pcsd session, would allow the attacker to     trigger requests on behalf of the user, for example     removing resources or restarting/removing nodes.
    (CVE-2016-0720)

  - It was found that pcsd did not invalidate cookies on the     server side when a user logged out. This could     potentially allow an attacker to perform session     fixation attacks on pcsd. (CVE-2016-0721)

These issues were discovered by Martin Prpic (Red Hat Product Security).

Additional Changes :

An update for pcs is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities.

The following packages have been upgraded to a newer upstream version:
pcs (0.9.152). (BZ#1299847)

Security Fix(es) :

* A Cross-Site Request Forgery (CSRF) flaw was found in the pcsd web UI. A remote attacker could provide a specially crafted web page that, when visited by a user with a valid pcsd session, would allow the attacker to trigger requests on behalf of the user, for example removing resources or restarting/removing nodes. (CVE-2016-0720)

* It was found that pcsd did not invalidate cookies on the server side when a user logged out. This could potentially allow an attacker to perform session fixation attacks on pcsd. (CVE-2016-0721)

These issues were discovered by Martin Prpic (Red Hat Product Security).

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

- Re-synced to upstream sources * Security fix for     CVE-2016-0720, CVE-2016-0721

    - Rubygems built with RELRO * Spec file cleanup * Fixed       multilib .pyc/.pyo issue ---- * Re-synced to upstream       sources * Security fix for CVE-2016-0720,       CVE-2016-0721 * Rubygems built with RELRO * Spec file       cleanup * Fixed multilib .pyc/.pyo issue

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Added missing python-lxml dependency ---- * Re-synced to upstream sources * Security fix for CVE-2016-0720, CVE-2016-0721 * Rubygems built with RELRO * Spec file cleanup * Fixed multilib .pyc/.pyo issue

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199124	RHEL 6 : pcs (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
95853	Scientific Linux Security Update : pcs on SL7.x x86_64 (20161103)	Nessus	Scientific Linux Local Security Checks	high
95342	CentOS 7 : pcs (CESA-2016:2596)	Nessus	CentOS Local Security Checks	high
94559	RHEL 7 : pcs (RHSA-2016:2596)	Nessus	Red Hat Local Security Checks	high
89617	Fedora 23 : pcs-0.9.149-2.fc23 (2016-cdd4228cc7)	Nessus	Fedora Local Security Checks	high
89516	Fedora 22 : pcs-0.9.149-2.fc22 (2016-3b20c4ec9d)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2016-0721

high

Tenable Plugins

high

high

high

high

high

high