CVE-2018-1079

CVE-2018-1079 is a privilege escalation vulnerability affecting pcs before versions 0.9.164 and 0.10, specifically impacting clusterlabs and Red Hat Enterprise Linux products. An authenticated attacker with write permissions can exploit a flaw in the pcsd service's REST interface, which improperly sanitizes filenames, to create or overwrite arbitrary files outside the intended directory. This vulnerability has a CVSS score of 6.5 (Medium), indicating a network-based attack with low complexity and requiring low privileges, leading to high integrity impact but no confidentiality or availability impact. There is currently no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.