PT-2019-5776 · Schedmd+1 · Slurm+1
Egbert Eich
·
Publicado
2019-12-11
·
Atualizado
2024-06-15
·
CVE-2019-19728
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SchedMD Slurm versions prior to 18.08.9
SchedMD Slurm versions 19.x prior to 19.05.5
Description
The issue is related to the
srun --uid command in the SLURM resource management system, which is associated with insecure privilege management. Exploitation of this issue allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.Recommendations
For SchedMD Slurm versions prior to 18.08.9, update to version 18.08.9 or later.
For SchedMD Slurm versions 19.x prior to 19.05.5, update to version 19.05.5 or later.
Correção
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Slurm
Suse