[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fucOYwd82JY9KuSHHrXP2RyUKnrOvcQsAzIDogHA4vnQ":3,"g5a-risk:CVE-2015-1848":171},{"success":4,"data":5,"meta":169},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":28,"epssPercentile":15,"epssTimeSeries":29,"severity":30,"affectedProducts":31,"affectedProductsCount":62,"references":63,"referencesCount":105,"weaknesses":106,"weaknessesCount":110,"isActivelyExploited":111,"cisaInfo":15,"otxData":15,"relatedBlogPosts":112,"seoMetadata":113,"configurations":138,"relatedVendorCves":167,"notableEvents":168},"CVE-2015-1848","What is CVE-2015-1848?","The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.  NOTE: this issue was SPLIT per ADT2 due to different vulnerability types. CVE-2015-3983 is for the issue with not setting the HTTPOnly flag.","The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to...","2015-05-14T14:59:07.897","2025-04-12T10:46:40.837",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":26,"ImpactScore":27,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","MEDIUM","NONE","PARTIAL",8.6,6.4,0.02407,[28,28,28,28,28,28,28],"Medium",[32,37,42,45,49,52,55,57,60],{"vendor":33,"product":34,"version":35,"criteria":36,"vulnerable":4},"fedora","pacemaker_configuration_system","*","cpe:2.3:a:fedora:pacemaker_configuration_system:*:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"redhat","enterprise_linux_high_availability","6.0","cpe:2.3:o:redhat:enterprise_linux_high_availability:6.0:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"7.0","cpe:2.3:o:redhat:enterprise_linux_high_availability:7.0:*:*:*:*:*:*:*",{"vendor":38,"product":46,"version":47,"criteria":48,"vulnerable":4},"enterprise_linux_high_availability_eus","6.6.z","cpe:2.3:o:redhat:enterprise_linux_high_availability_eus:6.6.z:*:*:*:*:*:*:*",{"vendor":38,"product":46,"version":50,"criteria":51,"vulnerable":4},"7.1","cpe:2.3:o:redhat:enterprise_linux_high_availability_eus:7.1:*:*:*:*:*:*:*",{"vendor":38,"product":53,"version":40,"criteria":54,"vulnerable":4},"enterprise_linux_resilient_storage","cpe:2.3:o:redhat:enterprise_linux_resilient_storage:6.0:*:*:*:*:*:*:*",{"vendor":38,"product":53,"version":43,"criteria":56,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_resilient_storage:7.0:*:*:*:*:*:*:*",{"vendor":38,"product":58,"version":47,"criteria":59,"vulnerable":4},"enterprise_linux_resilient_storage_eus","cpe:2.3:o:redhat:enterprise_linux_resilient_storage_eus:6.6.z:*:*:*:*:*:*:*",{"vendor":38,"product":58,"version":50,"criteria":61,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_resilient_storage_eus:7.1:*:*:*:*:*:*:*",9,[64,68,71,74,79,82,86,91,93,95,97,99,101,103],{"url":65,"source":66,"tags":67},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-June\u002F159374.html","Fedoraproject",[],{"url":69,"source":66,"tags":70},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-June\u002F159401.html",[],{"url":72,"source":66,"tags":73},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2015-June\u002F159412.html",[],{"url":75,"source":76,"tags":77},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0980.html","Red Hat",[78],"Third Party Advisory",{"url":80,"source":76,"tags":81},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2015-0990.html",[78],{"url":83,"source":84,"tags":85},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F74623","Securityfocus",[78],{"url":87,"source":76,"tags":88},"https:\u002F\u002Fbugzilla.redhat.com\u002Fattachment.cgi?id=1009855",[89,90],"Exploit","Issue Tracking",{"url":65,"source":66,"tags":92},[],{"url":69,"source":66,"tags":94},[],{"url":72,"source":66,"tags":96},[],{"url":75,"source":76,"tags":98},[78],{"url":80,"source":76,"tags":100},[78],{"url":83,"source":84,"tags":102},[78],{"url":87,"source":76,"tags":104},[89,90],14,[107],{"id":108,"name":108,"description":109},"Unknown","CWE-310",1,false,[],{"title":114,"metaDescription":115,"keywords":116,"canonicalUrl":117,"structuredData":118},"What is CVE-2015-1848? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2015-1848, a medium severity cyber security vulnerability from 2015. The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not ...","CVE-2015-1848, CVE-2015-1848 vulnerability, CVE-2015-1848 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, fedora security, redhat security, pacemaker_configuration_system vulnerability, enterprise_linux_high_availability vulnerability, enterprise_linux_high_availability_eus vulnerability, enterprise_linux_resilient_storage vulnerability, enterprise_linux_resilient_storage_eus vulnerability","\u002Fwhat-is\u002Fcve-2015-1848",{"@context":119,"@type":120,"headline":114,"description":115,"datePublished":10,"dateModified":11,"author":121,"publisher":125,"about":129,"mainEntityOfPage":133,"articleSection":136,"keywords":137},"https:\u002F\u002Fschema.org","TechArticle",{"@type":122,"name":123,"url":124},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":122,"name":123,"url":124,"logo":126},{"@type":127,"url":128},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":130,"name":6,"description":131,"additionalType":132},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":134,"@id":135},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2015-1848","Cybersecurity","CVE-2015-1848, CVE-2015-1848 vulnerability, CVE-2015-1848 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[139,147],{"Operator":15,"Negate":15,"Nodes":140},[141],{"Operator":142,"Negate":15,"CPEMatch":143},"OR",[144],{"Vulnerable":4,"Criteria":36,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":146},"E8A6579C-9633-4842-972F-4392053D9D73","0.9.137",{"Operator":15,"Negate":15,"Nodes":148},[149],{"Operator":142,"Negate":15,"CPEMatch":150},[151,153,155,157,159,161,163,165],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":152,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E5ACB0BE-6736-4644-86B1-77AA9E5B8AEF",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":154,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F92715C0-6341-4617-9F61-C87907D1C3F8",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"01885365-42EB-4519-B331-B30CE1D5968B",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":158,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EF7EA768-C917-4A14-B599-B8615A532B18",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B284C97C-AEF7-4431-8A02-E0EA5B991FE0",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F66BE726-A258-42D7-B23A-925F50FDF449",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":164,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"FC8BA03B-6E9A-46DC-B979-B8C522269F15",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":166,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"94594B19-900E-4F56-BDB8-3C9681656C84",[],[],{"lastModified":11,"cacheTime":170,"version":21},1792370360998,{"score":172,"band":30,"action":173,"scoredAt":174},45,"Plan remediation","2026-10-17T07:38:16.397411+00:00"]