Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
wisc htcondor vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2021-45102
An issue exists in HTCondor 9.0.x prior to 9.0.4 and 9.1.x prior to 9.1.2. When authenticating to an HTCondor daemon using a SciToken, a user may be granted authorizations beyond what the token should allow.
Wisc Htcondor 9.0.0
Wisc Htcondor 9.0.1
Wisc Htcondor 9.0.2
Wisc Htcondor 9.1.0
8.1
CVSSv3
CVE-2021-45101
An issue exists in HTCondor prior to 8.8.15, 9.0.x prior to 9.0.4, and 9.1.x prior to 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/...
Wisc Htcondor
Wisc Htcondor 9.1.0
8.8
CVSSv3
CVE-2014-8126
The scheduler in HTCondor prior to 8.2.6 allows remote authenticated users to execute arbitrary code.
Wisc Htcondor
8.8
CVSSv3
CVE-2012-3490
The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x prior to 7.6.10 and 7.8.x prior to 7.8.4 does not properly check the return value of setuid calls, which migh...
Wisc Htcondor
7.4
CVSSv3
CVE-2021-45104
An issue exists in HTCondor 9.0.x prior to 9.0.10 and 9.1.x prior to 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data.
Wisc Htcondor
9.9
CVSSv3
CVE-2021-25311
condor_credd in HTCondor prior to 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by root.
Wisc Htcondor
8.1
CVSSv3
CVE-2021-45103
An issue exists in HTCondor 9.0.x prior to 9.0.10 and 9.1.x prior to 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.
Wisc Htcondor
6.5
CVSSv3
CVE-2017-16816
The condor_schedd component in HTCondor prior to 8.6.8 and 8.7.x prior to 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions.
Wisc Htcondor
8.8
CVSSv3
CVE-2021-25312
HTCondor prior to 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
Wisc Htcondor
8.8
CVSSv3
CVE-2022-26110
An issue exists in HTCondor 8.8.x prior to 8.8.16, 9.0.x prior to 9.0.10, and 9.1.x prior to 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon.
Wisc Htcondor
Debian Debian Linux 9.0
Debian Debian Linux 10.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »