An issue was discovered in SchedMD... CVE-2023-49935
-
AV
AC
AU
C
I
A
发布：
2023-12-14
修订：
2024-01-03
An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有3条受影响产品信息
