← back
CVE-2021-43337

CVE-2021-43337

EPSS 1.2%
SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5VY34WSSPRPA6MISNYBZWHSGX2SYSEEE/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DUWNGDQTS7AWFI7FIHUWQOYJSD2IQTCG/https://lists.schedmd.com/pipermail/slurm-announce/https://lists.schedmd.com/pipermail/slurm-announce/2021/000068.htmlhttps://www.schedmd.com/news.phphttps://www.schedmd.com/news.php?id=256