The pcs daemon in the Pacemaker configuration tool improperly permits login for accounts that are expired or have expired passwords when using PAM authentication. This means that accounts that should be denied access due to expiration can still authenticate, potentially allowing unauthorized access. The vulnerability affects pcs versions =0.10.8-1ubuntu1, =0.10.11-2ubuntu2, and =0.10.11-2ubuntu3. There is no explicit patch or remediation information provided in the data.

Unprivileged expired accounts that should be denied access can still log in, potentially allowing unauthorized users to gain access to the system. The CVSS vector indicates a network attack vector with low attack complexity, requiring low privileges, no user interaction, and impacts confidentiality, integrity, and availability at a high level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict or disable expired accounts manually and monitor authentication logs for suspicious activity related to expired accounts.