{"schemaVersion":3,"id":"CVE-2015-3983","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The pcs daemon (pcsd) in PCS 0.9.137 and earlier does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.  NOTE: this issue was SPLIT from CVE-2015-1848 per ADT2 due to different vulnerability types.","dates":{"published":"2015-05-14T14:00:00.000Z","modified":"2024-08-06T06:04:02.512Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02082,"percentile":0.81251,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02082},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02082,"percentile":0.81251}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02082,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02082,"percentile":0.81251}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-310","name":"Cryptographic Issues","description":"Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.","type":"category","status":"Draft","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/310.html"}],"affected":[{"vendor":"fedora","product":"pacemaker_configuration_system","name":"pacemaker configuration system","label":"pacemaker_configuration_system","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 0.9.137","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 0.9.137","eol":null,"hubHref":"/vendor/fedora/pacemaker_configuration_system"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-0990.html","label":"rhn.redhat.com/errata/RHSA-2015-0990.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159374.html","label":"lists.fedoraproject.org/pipermail/package-announce/2015-June/159374.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://bugzilla.redhat.com/attachment.cgi?id=1009855","label":"bugzilla.redhat.com/attachment.cgi?id=1009855","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM"]},{"url":"http://rhn.redhat.com/errata/RHSA-2015-0980.html","label":"rhn.redhat.com/errata/RHSA-2015-0980.html","hostname":"rhn.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159412.html","label":"lists.fedoraproject.org/pipermail/package-announce/2015-June/159412.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-June/159401.html","label":"lists.fedoraproject.org/pipermail/package-announce/2015-June/159401.html","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.securityfocus.com/bid/74682","label":"www.securityfocus.com/bid/74682","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]}],"lineage":{"upstream":[],"downstream":["RHSA-2015:0980","RHSA-2015:0990"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2015-05-14T14:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-06T06:04:02.512Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:04:27.332Z","stale":false,"partial":false}}