Wisc HTCondor 8.8.2

CPE Details

Wisc HTCondor 8.8.2
wisc
htcondor
8.8.2
2020-01-27
11h52 +00:00
2020-01-27
11h52 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:wisc:htcondor:8.8.2:*:*:*:*:*:*:*

Informations

Vendor

wisc

Product

htcondor

Version

8.8.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-26110 2022-04-05 23h07 +00:00 An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon.
8.8
High
CVE-2021-45101 2021-12-16 03h46 +00:00 An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/or read their data.
8.1
High
CVE-2019-18823 2020-04-27 12h07 +00:00 HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control. It is possible to use a different authentication method to submit a job than the administrator has specified. If the administrator has configured the READ or WRITE methods to include CLAIMTOBE, then it is possible to impersonate another user to the condor_schedd. (For example to submit or remove jobs)
9.8
Critical