NetSight
low3.7

CVE-2020-27746

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race c…

Impact

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.

Affected products

VendorProductAffected versions
SchedmdSlurm
before 19.05.8
from 20.0.0 before 20.02.6
DebianDebian Linux
Version 10.0

Weakness classification

References