PT-2022-3405 · Schedmd+3 · Slurm+3
Published
2022-05-05
·
Updated
2023-11-02
·
CVE-2022-29500
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
SchedMD Slurm versions 20.11.x through 21.08.x
Description
The issue is related to incorrect access control in the Slurm resource management system, which is associated with deficiencies in the authentication procedure. This can allow a remote attacker to bypass existing security restrictions, leading to information disclosure.
Recommendations
For SchedMD Slurm versions 20.11.x through 21.08.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Slurm
Suse
Ubuntu