Lucene search

K
cvelistMitreCVELIST:CVE-2022-26110
HistoryApr 06, 2022 - 1:07 a.m.

CVE-2022-26110

2022-04-0601:07:11
mitre
www.cve.org
8
authentication bypass
htcondor
vulnerability
impersonation

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

42.9%

An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon.

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

42.9%