PT-2012-4758
CVE-2012-3493
·
Published
2012-09-28
·
Updated
2012-10-03
Description by
CVSS 2.0
5.8
MediumMetricsAV:N/AC:M/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Condor versions 7.6.x through 7.6.9
Condor versions 7.8.x through 7.8.3
Description
The issue allows remote attackers to obtain sensitive information and possibly control or start arbitrary jobs via a ClassAd request to the condor startd port. This is due to a leak of the ClaimId in the
command give request ad function.Recommendations
For Condor versions 7.6.x through 7.6.9, update to version 7.6.10 or later.
For Condor versions 7.8.x through 7.8.3, update to version 7.8.4 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾