CVE-2015-1848 - CVE House
Back to Database
Status published Medium CVE-2015-1848

The pcs daemon (pcsd) in PCS 0.9.137 and earlier does...

Vulnerability Description

The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-1848

Credits & Attribution

No credits recorded in the NVD database.

References

More from fedora

View All →
CVE-2015-3983
The pcs daemon (pcsd) in PCS 0.9.137 and earlier does...
Medium 4.3
CVE-2008-3283
Multiple memory leaks in Red Hat Directory Server 7.1 before...
High 7.8
CVE-2008-3252
Stack-based buffer overflow in the read_article function in getarticle.c in...
Critical 10
CVE-2008-2930
Red Hat Directory Server 7.1 before SP7, Red Hat Directory...
High 7.1
CVE-2008-2929
Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in...
Medium 4.3

Affected Vendor

Affected Software

pacemaker configuration system, enterprise linux high availability, enterprise linux high availability eus, enterprise linux resilient storage, enterprise linux resilient storage eus
Vulnerable Versions:
0, 6.0, 7.0, 6.6.z, 7.1

Timeline

Official Publish: May 14th, 2015
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.