PT-2025-13395 · Htcondor · Htcondor

Published 2025-03-27 · Updated 2025-03-29 · CVE-2025-30093

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions HTCondor versions 23.0.x through 23.0.21 HTCondor versions 23.10.x through 23.10.21 HTCondor versions 24.0.x through 24.0.5 HTCondor versions 24.6.x through 24.6.0

Description The issue allows authenticated attackers to bypass authorization restrictions. It is estimated to have a high risk.

Recommendations For HTCondor versions 23.0.x through 23.0.21, upgrade to version 23.0.22 or later. For HTCondor versions 23.10.x through 23.10.21, upgrade to version 23.10.22 or later. For HTCondor versions 24.0.x through 24.0.5, upgrade to version 24.0.6 or later. For HTCondor versions 24.6.x through 24.6.0, upgrade to version 24.6.1 or later. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-30093

Affected Products

Htcondor

References · 12

• https://osv.dev/vulnerability/DEBIAN-CVE-2025-30093 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-30093 · Security Note
• https://ubuntu.com/security/CVE-2025-30093 · Vendor Advisory
• https://htcondor.org/security/vulnerabilities/HTCONDOR-2025-0001.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30093 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-30093 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-30093 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-30093 · Vendor Advisory
• https://t.me/cvetracker/20105 · Telegram Post
• https://t.me/cvedetector/21334 · Telegram Post
• https://twitter.com/CVEnew/status/1906038473636897051 · Twitter Post
• https://twitter.com/RedTeamNewsBlog/status/1905723865147535562 · Twitter Post