CVE-2019-19727

2020-01-1319:15:12

Google

osv.dev

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

13.2%

JSON

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

CPENameOperatorVersion
slurmeqslurm-15-08-12-1
slurmeqslurm-14-11-5-1
slurmeqslurm-18-08-0-1
slurmeqslurm-2-3-1-1
slurmeqslurm-15-08-7-1
slurmeqslurm-14-03-0-0rc1
slurmeqslurm-17-11-0-0rc1
slurmeqslurm-16-05-6-1
slurmeqslurm-2-3-5-1
slurmeqslurm-17-02-7-1

Name	Operator	Version
slurm	eq	slurm-15-08-12-1
slurm	eq	slurm-14-11-5-1
slurm	eq	slurm-18-08-0-1
slurm	eq	slurm-2-3-1-1
slurm	eq	slurm-15-08-7-1
slurm	eq	slurm-14-03-0-0rc1
slurm	eq	slurm-17-11-0-0rc1
slurm	eq	slurm-16-05-6-1
slurm	eq	slurm-2-3-5-1
slurm	eq	slurm-17-02-7-1