Vulnerability Description
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Condor Project | Condor | 7.6.0 |
Related Weaknesses (CWE)
References
- http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40
- http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
- http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
- http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
- http://secunia.com/advisories/50666Vendor Advisory
- http://www.openwall.com/lists/oss-security/2012/09/20/9
- http://www.securityfocus.com/bid/55632
- https://bugzilla.redhat.com/show_bug.cgi?id=848214
- http://condor-git.cs.wisc.edu/?p=condor.git%3Ba=commitdiff%3Bh=1fff5d40
- http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
- http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
- http://rhn.redhat.com/errata/RHSA-2012-1278.htmlVendor Advisory
- http://rhn.redhat.com/errata/RHSA-2012-1281.htmlVendor Advisory
- http://secunia.com/advisories/50666Vendor Advisory
FAQ
What is CVE-2012-3491?
CVE-2012-3491 is a vulnerability with a CVSS score of 4.0 (MEDIUM). src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle j...
How severe is CVE-2012-3491?
CVE-2012-3491 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2012-3491?
Check the references section above for vendor advisories and patch information. Affected products include: Condor Project Condor.