VDB
CVE-2021-43337
CVE-2021-43337
PUBLISHED
Reported by mitre · Published November 17, 2021
SchedMD Slurm 21.08.* before 21.08.4 has Incorrect Access Control. On sites using the new AccountingStoreFlags=job_script and/or job_env options, the access control rules in SlurmDBD may permit users to request job scripts and environment files to which they should not have access.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | * |
Timeline
- Nov 17, 2021 EPSS Score
- Nov 17, 2021 CVE Published
- Jan 6, 2022 EPSS Score
- Jan 12, 2022 EPSS Score
- Mar 9, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jun 30, 2022 EPSS Score
- Oct 21, 2022 EPSS Score
- Dec 16, 2022 EPSS Score
- Feb 10, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- x_refsource_MISC
- x_refsource_MISC
- x_refsource_CONFIRM
- x_refsource_CONFIRM
- FEDORA-2021-d82d3d9738 vendor-advisoryx_refsource_FEDORA
- FEDORA-2021-0611d621ec vendor-advisoryx_refsource_FEDORA