User Impersanation

cumin is vulnerable to user impersanation. Users able to authentication directories even when they have weak permissions in condorio/condorauthfs.cpp, allowing malicious users to impersonate users by renaming a user's authentication directory...

CVE-2012-3492: Improper Authentication

The filesystem authentication condorio/condorauthfs.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a user's authentication directory...