VDB

CVE-2023-49938

CVE-2023-49938 PUBLISHED CVSS 8.199999809265137 HIGH

An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7.

EPSS 0.76% · 53.6th percentile

Risk Scores

CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
EPSS Score
0.76%
53.6th percentile

Affected Products

VendorProductVersions
n/an/a*, n/a
schedmdslurm22.05.0, 23.02.0, 22.05.0

Timeline

  • Dec 14, 2023 CVE Published
  • Dec 14, 2023 EPSS Score
  • Jan 10, 2024 PoC Published
  • Jan 13, 2024 EPSS Score
  • Feb 12, 2024 EPSS Score
  • Mar 13, 2024 EPSS Score
  • Apr 12, 2024 EPSS Score
  • May 11, 2024 EPSS Score
  • Jun 10, 2024 EPSS Score
  • Jul 10, 2024 EPSS Score
  • Aug 9, 2024 EPSS Score
  • Sep 8, 2024 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›