VDB

CVE-2023-49938

CVE-2023-49938 PUBLISHED CVSS 8.199999809265137 HIGH

An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7.

EPSS 0.76% · 51.7th percentile

Risk Scores

CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS Score
0.76%
51.7th percentile

Affected Products

VendorProductVersions
n/an/a*, n/a
schedmdslurm22.05.0, 23.02.0, 22.05.0

Timeline

  • Dec 14, 2023 CVE Published
  • Dec 14, 2023 EPSS Score
  • Jan 10, 2024 PoC Published
  • Jan 12, 2024 EPSS Score
  • Feb 10, 2024 EPSS Score
  • Mar 11, 2024 EPSS Score
  • Apr 9, 2024 EPSS Score
  • May 8, 2024 EPSS Score
  • Jun 6, 2024 EPSS Score
  • Jul 6, 2024 EPSS Score
  • Aug 4, 2024 EPSS Score
  • Sep 2, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›