Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Condor before 7.0.5 does not properly handle when the configuration specifies overlapping netmasks in allow or deny rules, which causes the rule to be ignored and allows attackers to bypass intended access restrictions.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Condor 允许和拒绝子网掩码的方式非法访问漏洞
Vulnerability Description
Condor(现称HTCondor)是美国威斯康星大学麦迪逊分校所开发的一套用来管理计算密集型任务的批处理队列系统。该系统是通过一个高吞吐量的计算(HTC)环境实现的,并提供任务队列机制、调度策略等功能。 Condor处理访问控制的允许和拒绝子网掩码的方式存在漏洞,如果配置文件的允许或拒绝规则中包含有重复的子网掩码的话,就会导致忽略该规则,允许非预期的访问。
CVSS Information
N/A
Vulnerability Type
N/A