Name: CVE-2019-19728: Improper Privilege Management
Creator: Rapid7
Published: 2020-01-13T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2019-19728, CWE-269, CVSS 7.5, EPSS 0.01297

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.

CVSS Details

CVSS 3.1 Base Score: 7.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade slurm-llnl	Jan 29, 2021	Jan 13, 2020
Suse	—	Upgrade slurm-sqlUpgrade slurm_20_02Upgrade slurm-nodeUpgrade libslurm31Upgrade libpmi0_20_11Upgrade slurm_20_02-sviewUpgrade slurm-config-manUpgrade pdsh-netgroupUpgrade slurm_20_02-torqueUpgrade slurm_20_02-pluginsUpgrade perl-slurm_18_08Upgrade pdsh-gendersUpgrade slurm_20_02-config-manUpgrade slurm_18_08-develUpgrade libslurm33Upgrade perl-slurm_20_11Upgrade slurm_18_08-nodeUpgrade pdsh-slurm_18_08Upgrade slurm-slurmdbdUpgrade pdsh-slurm_20_11Upgrade pdsh-dshgroupUpgrade slurm_20_11-luaUpgrade slurm_20_11-pam_slurmUpgrade slurm_20_02-docUpgrade slurm_20_11-auth-noneUpgrade perl-slurmUpgrade slurm_20_11-docUpgrade libpmi0_18_08Upgrade slurm-sched-wikiUpgrade slurm_18_08-slurmdbdUpgrade slurm_18_08-configUpgrade slurm_20_02-configUpgrade slurm_20_02-slurmdbdUpgrade libnss_slurm2_20_02Upgrade slurm-sviewUpgrade slurm_18_08Upgrade slurm-hdf5Upgrade slurm_20_11-develUpgrade perl-slurm_20_02Upgrade slurm_20_11-configUpgrade slurm_20_11-pluginsUpgrade slurm-pluginsUpgrade slurm_20_11-torqueUpgrade libnss_slurm2_20_11Upgrade slurm-mungeUpgrade slurm_18_08-mungeUpgrade slurm_18_08-pluginsUpgrade slurm-crayUpgrade slurm_20_11-sviewUpgrade slurm_18_08-pam_slurmUpgrade slurm-develUpgrade libpmi0_20_02Upgrade slurm_20_11-sqlUpgrade libslurm35Upgrade slurm_18_08-torqueUpgrade slurm-torqueUpgrade slurm-sjstatUpgrade slurm_20_11-nodeUpgrade pdsh-slurmUpgrade slurm-openlavaUpgrade slurm-auth-noneUpgrade slurm_20_02-sqlUpgrade slurm_18_08-docUpgrade slurm_18_08-luaUpgrade libpmi0Upgrade libslurm36Upgrade slurm_20_11-config-manUpgrade slurm_18_08-auth-noneUpgrade slurm-webdocUpgrade slurm-configUpgrade slurm_20_02-mungeUpgrade slurm-pam_slurmUpgrade slurm_20_11-mungeUpgrade pdsh-slurm_20_02Upgrade slurm_18_08-sqlUpgrade pdshUpgrade pdsh-machinesUpgrade slurm-slurmdb-directUpgrade slurm_20_11Upgrade slurm_20_02-luaUpgrade slurm-seffUpgrade slurm_20_02-develUpgrade slurm-luaUpgrade slurmUpgrade slurm_20_11-webdocUpgrade slurm_20_02-auth-noneUpgrade slurm_20_11-slurmdbdUpgrade slurm_20_02-pam_slurmUpgrade slurm_20_02-nodeUpgrade slurm-doc	Jan 22, 2020	Jan 13, 2020
Ubuntu	—	No solution exists	Jun 26, 2025	Jan 13, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence