Red Hat Enterprise Linux High Availability Eus vulnerabilities

2 CVEs affecting Red Hat Enterprise Linux High Availability Eus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-2319, published 2023-05-17.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-1848, published 2015-05-14. Medium severity, CVSS 6.8. EPSS: 2.4% chance of exploitation in the next 30 days. The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its…
• CVE-2023-2319, published 2023-05-17. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. It was discovered that an update for PCS package in RHBA-2023:2151 erratum released as part of Red Hat Enterprise Linux 9.2 failed to include the fix for the Webpack issue CVE-2023-28154 (for PCS…