Name: CVE-2019-19727: Incorrect Permission Assignment for Critical Resource
Creator: Rapid7
Published: 2020-01-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-19727, CWE-732, CVSS 5.5, EPSS 0.00354

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 has weak slurmdbd.conf permissions.

CVSS Details

CVSS 3.1 Base Score: 5.5
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Suse	—	Upgrade slurm-hdf5Upgrade slurm_20_11-sviewUpgrade libnss_slurm2_20_02Upgrade libnss_slurm2_20_11Upgrade slurm_20_11-slurmdbdUpgrade slurm_20_11-config-manUpgrade slurm-luaUpgrade slurm_18_08Upgrade slurm-crayUpgrade slurm-nodeUpgrade slurm-slurmdbdUpgrade slurm_18_08-pam_slurmUpgrade libslurm35Upgrade slurm_18_08-mungeUpgrade slurm_20_11-pam_slurmUpgrade pdsh-netgroupUpgrade perl-slurm_18_08Upgrade slurm-pam_slurmUpgrade slurm_20_02-nodeUpgrade slurm_18_08-develUpgrade slurm_20_02-pluginsUpgrade slurm-seffUpgrade slurm_20_11-pluginsUpgrade perl-slurmUpgrade slurm-sviewUpgrade slurm-sched-wikiUpgrade slurm_20_02-torqueUpgrade slurm_20_11-luaUpgrade slurm_20_11-torqueUpgrade slurm_20_11-configUpgrade perl-slurm_20_11Upgrade libslurm31Upgrade slurm-mungeUpgrade slurm-pluginsUpgrade pdsh-slurm_18_08Upgrade slurm-develUpgrade perl-slurm_20_02Upgrade pdsh-slurm_20_11Upgrade slurm-sqlUpgrade slurm_20_11-docUpgrade slurm_20_11-develUpgrade slurm_18_08-slurmdbdUpgrade slurm_20_02-slurmdbdUpgrade slurm_20_11-mungeUpgrade pdsh-gendersUpgrade slurm_20_11-sqlUpgrade libslurm33Upgrade slurm_18_08-sqlUpgrade slurm_20_02-sviewUpgrade slurm_18_08-configUpgrade slurm_20_02-develUpgrade slurm_20_11-nodeUpgrade pdshUpgrade libpmi0_18_08Upgrade libpmi0_20_11Upgrade slurm_20_11-auth-noneUpgrade slurm_18_08-torqueUpgrade slurm_20_02-docUpgrade slurm_20_02-pam_slurmUpgrade slurm_20_11-webdocUpgrade slurm-openlavaUpgrade pdsh-machinesUpgrade slurm_20_02-mungeUpgrade libpmi0_20_02Upgrade libpmi0Upgrade slurm_18_08-nodeUpgrade slurm-webdocUpgrade slurm_20_02-config-manUpgrade slurm-slurmdb-directUpgrade slurm-config-manUpgrade slurm-docUpgrade slurm_20_02-configUpgrade slurm_18_08-luaUpgrade slurm_20_11Upgrade slurm-configUpgrade slurm_18_08-docUpgrade slurm_20_02-sqlUpgrade pdsh-slurmUpgrade slurm_20_02-auth-noneUpgrade slurm_18_08-pluginsUpgrade slurm_18_08-auth-noneUpgrade slurm-sjstatUpgrade pdsh-dshgroupUpgrade libslurm36Upgrade slurm-auth-noneUpgrade slurm_20_02Upgrade slurmUpgrade slurm_20_02-luaUpgrade pdsh-slurm_20_02Upgrade slurm-torque	Jan 22, 2020	Jan 13, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence