CVE:CVE-2016-0720
CNNVD:CNNVD-201704-1149
PCS是ClusterLabs开源的一个 Corosync 和 Pacemaker 配置工具。
pcs 0.9.149之前的版本存在跨站请求伪造漏洞，该漏洞源于pcsd Web UI存在跨站请求伪造，远程攻击者可利用该漏洞执行未授权的操作。
solution:Upgrade clusterlabs pcs to a higher version than 0.9.148,and avoid the version (,0.9.148]; Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0