PT-2012-2001 · Terascale · Torque Resource Manager

Agostino Sarubbo · Publicado 2012-01-13 · Atualizado 2012-02-02 · CVE-2011-4925

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) versions prior to 2.5.9

Description The issue allows remote authenticated users to impersonate arbitrary user accounts when munge authentication is used.

Recommendations For versions prior to 2.5.9, update to version 2.5.9 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-4925

Produtos afetados

Torque Resource Manager

Referências · 6

• http://securityfocus.com/bid/51224 · Nota
• http://openwall.com/lists/oss-security/2012/01/05/1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4925 · Nota de Segurança
• http://secunia.com/advisories/47381 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/01/05/9 · Correção
• http://adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259 · Nota