PT-2022-12306 · Htcondor · Htcondor

Brian Bockelman + 1 · Published 2022-04-06 · Updated 2022-07-12 · CVE-2021-45104

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions HTCondor versions 9.0.x through 9.0.9 HTCondor versions 9.1.x through 9.4.x

Description An issue was discovered that allows an attacker who can capture HTCondor network data to interfere with users' jobs and data.

Recommendations For HTCondor versions 9.0.x through 9.0.9, update to version 9.0.10 or later. For HTCondor versions 9.1.x through 9.4.x, update to version 9.5.1 or later.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2021-45104

OPENSUSE-SU-2024:11976-1

Affected Products

Htcondor

References · 8

• https://osv.dev/vulnerability/UBUNTU-CVE-2021-45104 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-45104 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45104 · Security Note
• https://cve.org/CVERecord?id=CVE-2021-45104 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45104 · Vendor Advisory
• https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2022-0002 · Vendor Advisory
• https://htcondor.org/security/vulnerabilities/HTCONDOR-2022-0002 · Note
• https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0006 · Note