PT-2021-24208 · Htcondor · Htcondor

Jeny Teheran · Published 2021-12-16 · Updated 2021-12-22 · CVE-2021-45102

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HTCondor versions 9.0.x through 9.0.3 HTCondor versions 9.1.x through 9.1.1

Description: An issue was discovered in HTCondor when authenticating to an HTCondor daemon using a SciToken. A user may be granted authorizations beyond what the token should allow.

Recommendations: For HTCondor versions 9.0.x through 9.0.3, update to version 9.0.4 or later. For HTCondor versions 9.1.x through 9.1.1, update to version 9.1.2 or later.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-45102

Affected Products

Htcondor

References · 7

• https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0004 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-45102 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45102 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45102 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45102 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-45102 · Security Note
• https://t.me/cibsecurity/34124 · Telegram Post