PT-2019-5183 · Schedmd+1 · Slurm+1
Publicado
2019-07-10
·
Atualizado
2024-06-15
·
CVE-2019-12838
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SchedMD Slurm versions 17.11.x, 18.08.0 through 18.08.7, and 19.05.0
Description
The issue is related to a lack of protection of the SQL query structure, which can lead to SQL Injection. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For SchedMD Slurm versions 17.11.x, consider applying security patches or updates to fix the SQL Injection issue.
For SchedMD Slurm versions 18.08.0 through 18.08.7, consider applying security patches or updates to fix the SQL Injection issue.
For SchedMD Slurm version 19.05.0, consider applying security patches or updates to fix the SQL Injection issue.
As a temporary workaround, consider restricting access to sensitive SQL queries or disabling potentially vulnerable SQL functionality until a patch is available.
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Slurm
Suse