wisc htcondor vulnerabilities and exploits

(subscribe to this query)

5.8

CVSSv2

An issue exists in HTCondor 9.0.x prior to 9.0.10 and 9.1.x prior to 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.

Wisc Htcondor

6.5

CVSSv2

An issue exists in HTCondor 8.8.x prior to 8.8.16, 9.0.x prior to 9.0.10, and 9.1.x prior to 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon.

Wisc Htcondor Debian Debian Linux 9.0 Debian Debian Linux 10.0

5.5

CVSSv2

An issue exists in HTCondor 9.0.x prior to 9.0.10 and 9.1.x prior to 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.

Wisc Htcondor

6.5

CVSSv2

An issue exists in HTCondor 9.0.x prior to 9.0.4 and 9.1.x prior to 9.1.2. When authenticating to an HTCondor daemon using a SciToken, a user may be granted authorizations beyond what the token should allow.

Wisc Htcondor 9.0.0 Wisc Htcondor 9.0.1 Wisc Htcondor 9.0.2 Wisc Htcondor 9.1.0

5.5

CVSSv2

An issue exists in HTCondor prior to 8.8.15, 9.0.x prior to 9.0.4, and 9.1.x prior to 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/...

Wisc Htcondor Wisc Htcondor 9.1.0

6.5

CVSSv2

HTCondor prior to 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.

Wisc Htcondor

9

CVSSv2

condor_credd in HTCondor prior to 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by root.

Wisc Htcondor

7.5

CVSSv2

HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods ...

Wisc Htcondor Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Debian Debian Linux 9.0 Debian Debian Linux 10.0

6.5

CVSSv2

The scheduler in HTCondor prior to 8.2.6 allows remote authenticated users to execute arbitrary code.

Wisc Htcondor

9

CVSSv2

The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x prior to 7.6.10 and 7.8.x prior to 7.8.4 does not properly check the return value of setuid calls, which migh...

Wisc Htcondor

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook