CVE-2023-49933

—

CVSS 3.1

7.5 high

EPSS

<1%p31

Published

Dec 14, 2023 (Dec 14, 2023)

Modified

Jun 17, 2026

Description

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

Vendors: schedmd
Products: slurm
Weakness: CWE-924
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.