Логотип exploitDog
bind:"BDU:2024-00190" OR bind:"CVE-2023-49935"
Консоль
Логотип exploitDog

exploitDog

bind:"BDU:2024-00190" OR bind:"CVE-2023-49935"

Количество 9

Количество 9

fstec логотип

BDU:2024-00190

около 2 лет назад

Уязвимость менеджера управления ресурсами Slurm, связанная с некорректным сроком действия сеанса, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 8.8
EPSS: Низкий
ubuntu логотип

CVE-2023-49935

около 2 лет назад

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.

CVSS3: 8.8
EPSS: Низкий
nvd логотип

CVE-2023-49935

около 2 лет назад

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.

CVSS3: 8.8
EPSS: Низкий
debian логотип

CVE-2023-49935

около 2 лет назад

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is ...

CVSS3: 8.8
EPSS: Низкий
github логотип

GHSA-r926-qjg2-q5jr

около 2 лет назад

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.

CVSS3: 8.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:0312-1

около 2 лет назад

Security update for slurm_23_02

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:0289-1

около 2 лет назад

Security update for slurm_23_02

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:0284-1

около 2 лет назад

Security update for slurm

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:0280-1

около 2 лет назад

Security update for slurm_23_02

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
fstec логотип
BDU:2024-00190

Уязвимость менеджера управления ресурсами Slurm, связанная с некорректным сроком действия сеанса, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 8.8
0%
Низкий
около 2 лет назад
ubuntu логотип
CVE-2023-49935

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.

CVSS3: 8.8
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2023-49935

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.

CVSS3: 8.8
0%
Низкий
около 2 лет назад
debian логотип
CVE-2023-49935

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is ...

CVSS3: 8.8
0%
Низкий
около 2 лет назад
github логотип
GHSA-r926-qjg2-q5jr

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.

CVSS3: 8.8
0%
Низкий
около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:0312-1

Security update for slurm_23_02

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:0289-1

Security update for slurm_23_02

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:0284-1

Security update for slurm

около 2 лет назад
suse-cvrf логотип
SUSE-SU-2024:0280-1

Security update for slurm_23_02

около 2 лет назад

Уязвимостей на страницу