PT-2022-12305 · Htcondor · Htcondor

Brian Bockelman · Published 2022-04-06 · Updated 2022-04-13 · CVE-2021-45103

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions HTCondor versions 9.0.x through 9.0.9 HTCondor versions 9.1.x through 9.4.x

Description An issue was discovered that allows an attacker to access files stored in S3 cloud storage that a user has asked HTCondor to transfer.

Recommendations For HTCondor versions 9.0.x through 9.0.9, update to version 9.0.10 or later. For HTCondor versions 9.1.x through 9.4.x, update to version 9.5.1 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2021-45103

OPENSUSE-SU-2024:11976-1

Affected Products

Htcondor

References · 9

• https://osv.dev/vulnerability/CVE-2021-45103 · Vendor Advisory
• https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0001 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-45103 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45103 · Security Note
• https://ubuntu.com/security/CVE-2021-45103 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-45103 · Security Note
• https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0005 · Note
• https://htcondor.org/security/vulnerabilities/HTCONDOR-2022-0001 · Note
• https://t.me/cvenotify/28501 · Telegram Post