NetSight
IP …
high8.1

CVE-2020-12693

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate P…

Impact

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user.

Affected products

VendorProductAffected versions
SchedmdSlurm
from 19.05.0 before 19.05.7
from 20.02.0 before 20.02.3
FedoraprojectFedora
Versions 31, 32
OpensuseLeap
Versions 15.1, 15.2
DebianDebian Linux
Versions 9.0, 10.0

References