PT-2012-4758
CVE-2012-3493
·
تاريخ النشر
2012-09-28
·
تاريخ التحديث
2012-10-03
الوصف من
CVSS 2.0
5.8
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Condor versions 7.6.x through 7.6.9
Condor versions 7.8.x through 7.8.3
Description
The issue allows remote attackers to obtain sensitive information and possibly control or start arbitrary jobs via a ClassAd request to the condor startd port. This is due to a leak of the ClaimId in the
command give request ad function.Recommendations
For Condor versions 7.6.x through 7.6.9, update to version 7.6.10 or later.
For Condor versions 7.8.x through 7.8.3, update to version 7.8.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾