NetSight
high8.8

CVE-2021-45102

An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2.

Impact

An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2. When authenticating to an HTCondor daemon using a SciToken, a user may be granted authorizations beyond what the token should allow.

Affected products

VendorProductAffected versions
WiscHtcondor
Versions 9.0.0, 9.0.1, 9.0.2, 9.1.0

Weakness classification

References