CVE-2020-27746

—

CVSS 3.1

3.7 low

EPSS

<1%p56

Published

Nov 27, 2020 (Nov 27, 2020)

Modified

Jun 17, 2026

Description

Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.

Vendors: schedmd debian
Products: slurm, debian linux
Weakness: CWE-362
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.