VulnerabilityModified
CVE-2009-4133
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify…
MEDIUM 6.5EPSS 2.08%
Does this matter?
Lower severity and a low EPSS score (2.08%). Track it; it rarely justifies an emergency change on its own.
Description
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 2.08% probability · 80th percentile
- CISA KEV
- Not listed
- Affected
- condor project/condor · redhat/enterprise mrg
- Source
- secalert@redhat.com
References
- http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018
- http://secunia.com/advisories/37766Vendor Advisory
- http://secunia.com/advisories/37803Vendor Advisory
- http://securitytracker.com/id?1023378
- http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000Vendor Advisory
- http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2009-1688.html
- http://www.redhat.com/support/errata/RHSA-2009-1689.html
- http://www.securityfocus.com/bid/37443
- https://bugzilla.redhat.com/show_bug.cgi?id=544371
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54984
- http://condor-wiki.cs.wisc.edu/index.cgi/tktview?tn=1018
- http://secunia.com/advisories/37766Vendor Advisory
- http://secunia.com/advisories/37803Vendor Advisory
- http://securitytracker.com/id?1023378
- http://www.cs.wisc.edu/condor/manual/v7.4/8_3Stable_Release.html#SECTION00931000000000000000Vendor Advisory
- http://www.cs.wisc.edu/condor/security/vulnerabilities/CONDOR-2009-0001.htmlVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2009-1688.html
- http://www.redhat.com/support/errata/RHSA-2009-1689.html
- http://www.securityfocus.com/bid/37443
- https://bugzilla.redhat.com/show_bug.cgi?id=544371
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54984
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.