Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Condor管理任务安全绕过限制漏洞
Vulnerability Description
Condor（现称HTCondor）是美国威斯康星大学麦迪逊分校所开发的一套用来管理计算密集型任务的批处理队列系统。该系统是通过一个高吞吐量的计算（HTC）环境实现的，并提供任务队列机制、调度策略等功能。 Condor管理任务的方式存在漏洞，可能允许授权向Condor提交任务的用户以不同本地用户的身份排列任务，这可能导致非授权访问该用户的账号。Condor不会以root用户权限运行任务，因此这个漏洞不会导致入侵root用户账号。
CVSS Information
N/A
Vulnerability Type
N/A