CVSS: 8.1EPSS: 0%CPEs: 3EXPL: 0CVE-2021-45101
https://notcve.org/view.php?id=CVE-2021-45101
16 Dec 2021 — An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/or read their data. Se ha detectado un problema en HTCondor versiones anteriores a versión 8.8.15, versiones 9.0.x anteriores a 9.0.4 y versiones 9.1.x anteriores a 9.1.2. Usando herramientas de línea de comandos estándar, un usuario c... • https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0003 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2017-16816
https://notcve.org/view.php?id=CVE-2017-16816
05 Jul 2018 — The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions. El componente condor_schedd en HTCondor en versiones anteriores a la 8.6.8 y versiones 8.7.x anteriores a la 8.7.5 permite que usuarios autenticados remotos provoquen una denegación de servicio (cierre inesperado del demonio) aprovechando el uso de las extensiones GSI y VOMS. • http://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2017-0001.html • CWE-20: Improper Input Validation •