CVE-2022-26110

An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

Code injection

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

UBUNTU-CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

CVE-2022-26110

An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon...

CVE-2022-26110

HTCondor vulnerability CVE-2022-26110 affects HTCondor 8.8.x up to 8.8.15, 9.0.x up to 9.0.9, and 9.1.x up to 9.5.x. When a user authenticates to a HTCondor daemon via CLAIMTOBE, they can impersonate another entity when issuing subsequent commands to that daemon. Root cause: misuse of CLAIMTOBE a...

CVE-2022-26110

An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon...

CVE-2022-26110

An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the user can then impersonate any entity when issuing additional commands to that daemon...

CVE-2021-45104

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data...

CVE-2021-45104

CVE-2021-45104 affects HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. A threat actor who can capture HTCondor network traffic can interfere with users’ jobs and data. The available connected documents confirm the affected product/version range and the network-based access requirement, with ...

CVE-2021-45104

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker who can capture HTCondor network data can interfere with users' jobs and data...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

CVE-2021-45103

HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1 contains a vulnerability where an attacker can access files stored in S3 that a user asked HTCondor to transfer. Affected version range: HTCondor 9.0.x prior to 9.0.10 and 9.1.x prior to 9.5.1. Impact: partial confidentiality and partial integri...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

HTCondor 安全漏洞

HTCondor is a workload management system at the University of Wisconsin-Madison USA. The system provides job queuing mechanisms, scheduling policies, prioritization schemes, resource monitoring, and resource management. A security vulnerability exists in HTCondor that stems from the fact that whe...

PT-2022-17680 · Htcondor · Htcondor

Name of the Vulnerable Software and Affected Versions: HTCondor versions 8.8.x through 8.8.15 HTCondor versions 9.0.x through 9.0.9 HTCondor versions 9.1.x through 9.5.x Description: An issue was discovered in HTCondor. When a user authenticates to an HTCondor daemon via the CLAIMTOBE method, the...

HTCondor 日志信息泄露漏洞

HTCondor is a workload management system at the University of Wisconsin-Madison USA. The system provides job queuing mechanisms, scheduling policies, prioritization schemes, resource monitoring and resource management. A security vulnerability exists in HTCondor versions 9.0.x through 9.0.10 and...

HTCondor Access Control Error Vulnerability (CNVD-2022-07495)

HTCondor is a workload management system. HTCondor is vulnerable to an access control error that could be exploited by an attacker to obtain authorization beyond what the token should allow...