Lucene search
K

8 matches found

NVD
NVD
added 2024/02/09 12:15 a.m.11 views

CVE-2024-24825

DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...

9.1CVSS9.1AI score0.00534EPSS
Exploits0References2
Prion
Prion
added 2024/02/09 12:15 a.m.8 views

Design/Logic Flaw

DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...

5CVSS7.2AI score0.00534EPSS
Exploits0References2Affected Software1
PyPA
PyPA
added 2024/02/09 12:15 a.m.7 views

PYSEC-2024-125

DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resources to unintended parties. This issue has been addressed in release version 8.0.37. Users are advised to upgrade. There are no known...

9.1CVSS6.7AI score0.00534EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2024/02/08 11:39 p.m.45 views

CVE-2024-24825

DIRAC’s TokenManager vulnerability (CVE-2024-24825) affects DIRAC before version 8.0.37, allowing any user to obtain a token requested by another user/agent and potentially expose resources. The issue is fixed in 8.0.37; upg rade to that release. Other sources (GitHub advisory GHSA-59qj-jcjv-662j...

9.1CVSS7.3AI score0.00534EPSS
Exploits0References2Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2024/02/08 12:0 a.m.19 views

DIRAC's TokenManager does not check permissions on cached tokens

Any user could get a token that has been requested by another user/agent...

9.1CVSS8.3AI score0.00534EPSS
Exploits0References7Affected Software1
securityvulns
securityvulns
added 2012/12/02 12:0 a.m.55 views

NGS000107 Technical Advisory: Oracle Gridengine sgepasswd Buffer Overflow

======= Summary ======= Name: Oracle Gridengine sgepasswd Buffer Overflow Release Date: 30 November 2012 Reference: NGS00107 Discoverer: Edward Torkington [email protected] Vendor: Oracle Vendor Reference: Systems Affected: Multiple packages - version 62u7 Risk: High Status: Publish...

6.9AI score
Exploits0
Fedora
Fedora
added 2012/04/27 5:54 a.m.16 views

[SECURITY] Fedora 16 Update: gridengine-6.2u5p2-7.fc16.3

In a typical network that does not have distributed resource management software, workstations and servers are used from 5% to 20% of the time. Even technical servers are generally less than fully utilized. This means that there are a lot of cycles that can be used productively if only users know...

2AI score
Exploits0
Fedora
Fedora
added 2012/04/27 5:48 a.m.16 views

[SECURITY] Fedora 15 Update: gridengine-6.2u5-10.fc15.3

In a typical network that does not have distributed resource management software, workstations and servers are used from 5% to 20% of the time. Even technical servers are generally less than fully utilized. This means that there are a lot of cycles that can be used productively if only users know...

2AI score
Exploits0
Rows per page
Query Builder