CVE-2020-27746 — LOW (3.7) — White Hats Nepal

Q: How severe is CVE-2020-27746?

CVE-2020-27746 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2020-27746?

Check the references section above for vendor advisories and patch information. Affected products include: Schedmd Slurm, Debian Debian Linux.

Vulnerability Description

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.

CVSS Score

3.7

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Schedmd	Slurm	< 19.05.8
Debian	Debian Linux	10.0

Related Weaknesses (CWE)

CWE-362

References

https://www.debian.org/security/2021/dsa-4841Third Party Advisory
https://www.schedmd.com/news.phpPatchVendor Advisory
https://www.debian.org/security/2021/dsa-4841Third Party Advisory
https://www.schedmd.com/news.phpPatchVendor Advisory

FAQ

What is CVE-2020-27746?

CVE-2020-27746 is a vulnerability with a CVSS score of 3.7 (LOW). Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc...

How severe is CVE-2020-27746?

CVE-2020-27746 has been rated LOW with a CVSS base score of 3.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-27746?

Check the references section above for vendor advisories and patch information. Affected products include: Schedmd Slurm, Debian Debian Linux.