CVE:CVE-2016-0721
CNNVD:CNNVD-201704-1148
PCS是ClusterLabs开源的一个 Corosync 和 Pacemaker 配置工具。
PCS 0.9.157之前的版本存在授权问题漏洞，该漏洞源于程序没有使退出登录用户的cookie失效。攻击者可利用该漏洞实施会话固定攻击。
solution:Upgrade clusterlabs pcs to a higher version than 0.9.156,and avoid the version (,0.9.156]; Upgrade fedoraproject fedora to a higher version than 22,23,and avoid the version 22,23; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0