CVE-2020-12693
—CVSS 3.1
8.1 high
EPSS
2%p82
Published
()
Modified
Description
Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user.
- Vendors
- schedmdfedoraprojectopensusedebian
- Products
- slurm, fedora, leap, debian linux
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.