VULNERABILITY INTELLIGENCE
CVE-2015-5189
CVSS score4.9 MEDIUM
EPSS probability0.98%
CISA KEVNot currently listed
Published2015-09-03
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:P/I:P/A:N
Description
Race condition in pcsd in PCS 0.9.139 and earlier uses a global variable to validate usernames, which allows remote authenticated users to gain privileges by sending a command that is checked for security after another user is authenticated.
Weakness classification
- CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')