Name: CVE-2022-29500: Undefined Security Weakness
Creator: Rapid7
Published: 2022-05-05T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-29500, CVSS 8.8, EPSS 0.02314

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Information Disclosure.

CVSS Details

CVSS 3.1 Base Score: 8.8
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Debian	—	Upgrade slurm-wlm	Nov 4, 2022	May 5, 2022
Suse	—	Upgrade slurm_18_08-torqueUpgrade slurm_22_05-configUpgrade slurm_22_05Upgrade slurm-crayUpgrade slurm-develUpgrade slurm_20_02-config-manUpgrade slurm-pam_slurmUpgrade perl-slurmUpgrade slurm_18_08-docUpgrade libpmi0_22_05Upgrade libpmi0_18_08Upgrade slurm_18_08-nodeUpgrade slurm_20_11-sviewUpgrade slurm_22_05-crayUpgrade slurm-pluginsUpgrade slurm_22_05-mungeUpgrade slurm_23_02-develUpgrade pdsh-netgroupUpgrade slurm-sqlUpgrade slurm_23_02-config-manUpgrade slurm_20_11-hdf5Upgrade slurm-testsuiteUpgrade slurm-sviewUpgrade slurm_22_05-slurmdbdUpgrade slurm_20_02-slurmdbdUpgrade libslurm36Upgrade slurm_20_11-config-manUpgrade slurm_22_05-sqlUpgrade slurm-torqueUpgrade slurm-slurmdb-directUpgrade slurm_20_11-pluginsUpgrade slurm_18_08-configUpgrade slurm_22_05-pam_slurmUpgrade slurm_22_05-docUpgrade slurm_18_08-slurmdbdUpgrade libslurm39Upgrade slurm_20_02-torqueUpgrade slurm_22_05-luaUpgrade slurm-seffUpgrade slurm_22_05-develUpgrade slurm_20_02-luaUpgrade slurm_20_11Upgrade slurm_20_02-nodeUpgrade slurm-restUpgrade libslurm31Upgrade pdsh-slurm_18_08Upgrade slurm_23_02-sviewUpgrade perl-slurm_18_08Upgrade slurm_20_11-luaUpgrade slurm_20_11-mungeUpgrade slurm_23_02-configUpgrade pdsh-slurm_22_05Upgrade libslurm33Upgrade perl-slurm_22_05Upgrade slurm_23_02-webdocUpgrade pdsh-slurmUpgrade slurm_20_02-sjstatUpgrade pdsh-slurm_20_11Upgrade slurm_18_08-webdocUpgrade slurm_20_02-docUpgrade slurm_20_11-pam_slurmUpgrade slurm_18_08Upgrade libnss_slurm2_20_02Upgrade slurm-sched-wikiUpgrade pdsh-gendersUpgrade slurm_18_08-mungeUpgrade slurm_18_08-develUpgrade slurm_18_08-pam_slurmUpgrade slurm_20_11-docUpgrade perl-slurm_20_02Upgrade libpmi0Upgrade slurm_18_08-seffUpgrade slurm-webdocUpgrade perl-slurm_20_11Upgrade slurm_18_08-sqlUpgrade libslurm32Upgrade slurm_23_02-auth-noneUpgrade slurm-hdf5Upgrade slurm_20_02Upgrade slurm_23_02-plugin-ext-sensors-rrdUpgrade slurm_20_11-sqlUpgrade slurm_23_02-nodeUpgrade slurm_23_02-pluginsUpgrade slurm_20_11-crayUpgrade libslurm35Upgrade libslurm38Upgrade libpmi0_20_02Upgrade slurm_22_05-nodeUpgrade libpmi0_20_11Upgrade libnss_slurm2_22_05Upgrade slurm_18_08-openlavaUpgrade slurm_20_11-auth-noneUpgrade slurm_20_11-develUpgrade slurm_18_08-sjstatUpgrade slurm_23_02Upgrade slurm_20_02-restUpgrade slurm_18_08-sviewUpgrade slurm_22_05-testsuiteUpgrade slurm_23_02-torqueUpgrade slurm_22_05-sjstatUpgrade slurm_18_08-pluginsUpgrade slurm_22_05-pluginsUpgrade libnss_slurm2_23_02Upgrade slurm-mungeUpgrade slurm-sjstatUpgrade slurm_22_05-config-manUpgrade slurm_22_05-seffUpgrade slurm_20_02-openlavaUpgrade slurm_20_11-webdocUpgrade slurm-openlavaUpgrade slurm_22_05-webdocUpgrade slurm_20_11-restUpgrade slurm_20_11-nodeUpgrade slurm-slurmdbdUpgrade pdsh-machinesUpgrade slurm_22_05-restUpgrade slurm_20_11-sjstatUpgrade slurm_23_02-pam_slurmUpgrade slurm_23_02-docUpgrade slurm_20_02-pluginsUpgrade pdsh-slurm_20_02Upgrade slurm_18_08-hdf5Upgrade slurmUpgrade slurm_18_08-auth-noneUpgrade slurm_20_02-sqlUpgrade slurm_20_02-crayUpgrade slurm_22_05-sviewUpgrade slurm_20_02-pam_slurmUpgrade libpmi0_23_02Upgrade slurm-configUpgrade slurm_20_11-torqueUpgrade perl-slurm_23_02Upgrade slurm_20_11-openlavaUpgrade slurm_20_02-configUpgrade slurm_20_02-mungeUpgrade slurm_18_08-luaUpgrade pdsh-dshgroupUpgrade libnss_slurm2_20_11Upgrade slurm_22_05-hdf5Upgrade slurm-luaUpgrade slurm_23_02-slurmdbdUpgrade slurm_23_02-luaUpgrade slurm_22_05-torqueUpgrade slurm_23_02-mungeUpgrade slurm_20_02-seffUpgrade slurm_20_02-auth-noneUpgrade slurm_20_02-hdf5Upgrade slurm_23_02-restUpgrade slurm-docUpgrade slurm_20_11-slurmdbdUpgrade slurm_23_02-crayUpgrade slurm_20_11-configUpgrade slurm_22_05-auth-noneUpgrade slurm-auth-noneUpgrade slurm_22_05-openlavaUpgrade slurm_20_02-sviewUpgrade libnss_slurm2Upgrade slurm-plugin-ext-sensors-rrdUpgrade slurm_23_02-sqlUpgrade slurm_18_08-crayUpgrade slurm_18_08-config-manUpgrade slurm-config-manUpgrade slurm_20_02-develUpgrade pdshUpgrade slurm-nodeUpgrade slurm_20_02-webdocUpgrade slurm_20_11-seff	Oct 26, 2022	May 5, 2022
Ubuntu	—	Upgrade libpam-slurm (Ubuntu Pro)Upgrade slurmrestd (Ubuntu Pro)Upgrade slurmdbd (Ubuntu Pro)Upgrade libpmi2-0 (Ubuntu Pro)Upgrade slurmctld (Ubuntu Pro)Upgrade slurm-client (Ubuntu Pro)Upgrade slurm-wlm-basic-plugins (Ubuntu Pro)Upgrade libslurm34 (Ubuntu Pro)Upgrade libslurm-perl (Ubuntu Pro)Upgrade libpmi0 (Ubuntu Pro)Upgrade libslurmdb-perl (Ubuntu Pro)Upgrade slurm-wlm (Ubuntu Pro)Upgrade slurmd (Ubuntu Pro)Upgrade libslurm37 (Ubuntu Pro)	Nov 1, 2023	May 5, 2022

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritise with Active Threat Intelligence