CWE Code: 22
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Summary: pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious rest call. the rest interface of the pcsd service did not properly sanitize the file name from the /remote/put_file query. if the /etc/booth directory exists, an authenticated attacker with write permissions could create or overwrite arbitrary files with arbitrary data outside of the /etc/booth directory, in the context of the pcsd process.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2018-04-12
Last Modified Date: 2019-10-09