What is RHSA-2018:1060?

RHSA-2018:1060 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: pcs security update

Which CVE IDs does RHSA-2018:1060 cover?

RHSA-2018:1060 covers the following CVE IDs: CVE-2018-1079, CVE-2018-1086, CVE-2018-1000119. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2018:1060?

RHSA-2018:1060 has a CVSS v3 base score of 8.7, published by Red Hat Product Security.

RHSA-2018:1060HighCVSS 8.7

Red Hat Security Advisory: pcs security update

Vendor

Red Hat Product Security

Published

April 10, 2018

Last Modified

June 27, 2026

🔗 CVE IDs covered (3)

CVE-2018-1079 →CVE-2018-1086 →CVE-2018-1000119 →

📋 Description

CVE-2018-1079 — pcs: Privilege escalation via authorized user malicious REST call CVE-2018-1086 — pcs: Debug parameter removal bypass, allowing information disclosure CVE-2018-1000119 — rack-protection: Timing attack in authenticity_token.rb

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2018:1060
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1534027
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1550243
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1557366
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1060.json