CVE-2015-5189: Pacemaker/corosync Configuration System Project Pacemaker/corosync Configuration System

Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days.

Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.

Affected products

• Pacemaker/corosync Configuration System Project Pacemaker/corosync Configuration System: up to and including 0.9.139

Published 2015-09-03. Last modified 2026-06-17.