PT-2009-4537 · Simple Linux Utility For Resource Management · Slurm
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Simple Linux Utility for Resource Management (SLURM) versions 1.2 through 1.3.13
Description
The issue arises from the improper setting of supplementary groups before invoking certain commands from the daemon, potentially allowing local users to modify files and gain privileges.
Recommendations
For versions 1.2 through 1.3.13, update to version 1.3.14 or later to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Slurm