Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/pcs@0.9.162-5.el7_5?arch=1
purl pkg:rpm/redhat/pcs@0.9.162-5.el7_5?arch=1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.9
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-au19-kepf-pyhe
Aliases:
CVE-2018-1086
security update There are no reported fixed by versions.
VCID-q4x5-bxn7-5yht
Aliases:
CVE-2018-1000119
GHSA-688c-3x49-6rqj
Timing attack vulnerability Sinatra rack-protection contains a timing attack vulnerability in the CSRF token checking that can result in signatures can be exposed. This attack appear to be exploitable via network connectivity to the ruby application. There are no reported fixed by versions.
VCID-wrhk-ya3a-bbfz
Aliases:
CVE-2018-1079
pcs: Privilege escalation via authorized user malicious REST call There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:41:03.378637+00:00 RedHat Importer Affected by VCID-q4x5-bxn7-5yht https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1000119.json 38.0.0
2026-04-01T14:25:32.842732+00:00 RedHat Importer Affected by VCID-au19-kepf-pyhe https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1086.json 38.0.0
2026-04-01T14:25:32.824696+00:00 RedHat Importer Affected by VCID-wrhk-ya3a-bbfz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1079.json 38.0.0