4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
54.6%
Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource
Manager) before 2.5.9, when munge authentication is used, allows remote
authenticated users to impersonate arbitrary user accounts via unspecified
vectors.
Author | Note |
---|---|
sbeattie | munge auth did not get added to torque until 2.5.3 see http://www.clusterresources.com/products/torque/docs/changelog.shtml#253 |