CVE-2012-3493

Name of the Vulnerable Software and Affected Versions Condor versions 7.6.x through 7.6.9 Condor versions 7.8.x through 7.8.3

Description The issue allows remote attackers to obtain sensitive information and possibly control or start arbitrary jobs via a ClassAd request to the condor startd port. This is due to a leak of the ClaimId in the command give request ad function.

Recommendations For Condor versions 7.6.x through 7.6.9, update to version 7.6.10 or later. For Condor versions 7.8.x through 7.8.3, update to version 7.8.4 or later.