high7.8
CVE-2017-15566
Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege es…
Impact
Insecure SPANK environment variable handling exists in SchedMD Slurm before 16.05.11, 17.x before 17.02.9, and 17.11.x before 17.11.0rc2, allowing privilege escalation to root during Prolog or Epilog execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Schedmd | Slurm | before 16.05.11 from 17.02.0 before 17.2.09 Version 17.11.0 |