CyberRota Analysis
AI-GeneratedThe Pacemaker Configuration System contains a vulnerability that allows local attackers in the 'haclient' group to exploit the 'pcs host auth --token' command to read arbitrary files shorter than 256 bytes with root privileges. This can lead to the unauthorized disclosure of sensitive information, including API keys and configuration secrets. Organizations utilizing this system should prioritize patching to mitigate the risk of data exfiltration.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' group can exploit the 'pcs host auth --token' command to read the contents of arbitrary files on the filesystem, provided the files are shorter than 256 bytes. The file contents are read with root privileges by the pcsd daemon and can be exfiltrated by the attacker through subsequent cluster node communication. This allows disclosure of sensitive data such as API keys, tokens, or configuration secrets that would otherwise be inaccessible to the attacker.