Vulnerability Details : CVE-2012-3491
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
Exploit prediction scoring system (EPSS) score for CVE-2012-3491
Probability of exploitation activity in the next 30 days: 0.58%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 77 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-3491
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
NIST |
CWE ids for CVE-2012-3491
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2012-3491
-
http://research.cs.wisc.edu/condor/manual/v7.6/8_3Stable_Release.html
8.3 Stable Release Series 7.6
-
http://research.cs.wisc.edu/condor/manual/v7.8/9_3Stable_Release.html
9.3 Stable Release Series 7.8
-
http://condor-git.cs.wisc.edu/?p=condor.git;a=commitdiff;h=1fff5d40
HTCondor Git - condor.git/commitdiffExploit
-
https://bugzilla.redhat.com/show_bug.cgi?id=848214
848214 – (CVE-2012-3491) CVE-2012-3491 condor: local users can abort any idle jobs
-
http://rhn.redhat.com/errata/RHSA-2012-1281.html
RHSA-2012:1281 - Security Advisory - Red Hat Customer PortalVendor Advisory
-
http://www.securityfocus.com/bid/55632
Condor Multiple Security Bypass Vulnerabilities
-
http://rhn.redhat.com/errata/RHSA-2012-1278.html
RHSA-2012:1278 - Security Advisory - Red Hat Customer PortalVendor Advisory
-
http://www.openwall.com/lists/oss-security/2012/09/20/9
oss-security - Notification of upstream Condor security fixes
Products affected by CVE-2012-3491
- cpe:2.3:a:condor_project:condor:7.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.9:*:*:*:*:*:*:*
- cpe:2.3:a:condor_project:condor:7.6.7:*:*:*:*:*:*:*