A Incorrect Default Permissions vulnerability in the packaging of the slurm testsuite of openSUSE Factory allows local attackers with control over the slurm user to escalate to root. This issue affects: openSUSE Factory slurm versions prior to 22.05.2-3.3.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade slurm_22_05-config-manUpgrade slurm_22_05-webdocUpgrade slurm_20_02-sqlUpgrade libslurm35Upgrade pdsh-machinesUpgrade slurm-mungeUpgrade slurm_18_08-openlavaUpgrade slurm-luaUpgrade slurm_18_08-auth-noneUpgrade pdshUpgrade libpmi0_20_02Upgrade slurm_22_05-sjstatUpgrade slurm_22_05-restUpgrade slurm_22_05-hdf5Upgrade slurm-auth-noneUpgrade slurm_22_05-sviewUpgrade pdsh-slurm_20_02Upgrade slurm_18_08-sjstatUpgrade slurm-slurmdbdUpgrade slurm_20_02-configUpgrade slurm_22_05-auth-noneUpgrade slurm_20_02-auth-noneUpgrade slurm_22_05-openlavaUpgrade slurm_20_02-pluginsUpgrade slurm-docUpgrade slurm_20_02-restUpgrade slurm_20_02-sviewUpgrade slurm_18_08-luaUpgrade slurm_20_02-develUpgrade pdsh-slurm_22_05Upgrade slurm_22_05-seffUpgrade slurm_18_08-pluginsUpgrade slurm_20_02-hdf5Upgrade slurm_22_05-torqueUpgrade slurm_20_02-seffUpgrade slurm_20_02-webdocUpgrade slurm-configUpgrade slurm_20_02-crayUpgrade slurm_22_05-pluginsUpgrade slurm_18_08-hdf5Upgrade slurm_18_08-crayUpgrade pdsh-dshgroupUpgrade slurm_20_02-openlavaUpgrade slurm_22_05-nodeUpgrade slurmUpgrade slurm_18_08-config-manUpgrade slurm_22_05-testsuiteUpgrade slurm_18_08-sviewUpgrade libnss_slurm2_22_05Upgrade slurm_18_08-torqueUpgrade slurm_22_05-develUpgrade slurm_20_02-docUpgrade slurm_18_08-pam_slurmUpgrade slurm_18_08-webdocUpgrade libpmi0_18_08Upgrade slurm-pluginsUpgrade slurm-pam_slurmUpgrade slurm_22_05-docUpgrade slurm_18_08-slurmdbdUpgrade perl-slurm_18_08Upgrade slurm_18_08-seffUpgrade pdsh-slurmUpgrade slurm-sched-wikiUpgrade libpmi0_22_05Upgrade slurm_20_02-sjstatUpgrade slurm-torqueUpgrade slurm_22_05-sqlUpgrade slurm_22_05-luaUpgrade pdsh-netgroupUpgrade slurm_22_05-pam_slurmUpgrade slurm_20_02-slurmdbdUpgrade slurm_22_05Upgrade slurm_18_08-develUpgrade slurm-sqlUpgrade perl-slurm_20_02Upgrade perl-slurmUpgrade libpmi0Upgrade slurm_20_02-mungeUpgrade slurm_20_02Upgrade slurm_22_05-configUpgrade libnss_slurm2_20_02Upgrade slurm_20_02-config-manUpgrade slurm_18_08-configUpgrade slurm_18_08Upgrade pdsh-slurm_18_08Upgrade slurm_18_08-mungeUpgrade libslurm33Upgrade slurm_18_08-nodeUpgrade slurm-slurmdb-directUpgrade slurm-develUpgrade perl-slurm_22_05Upgrade slurm_22_05-slurmdbdUpgrade slurm_20_02-nodeUpgrade slurm_18_08-docUpgrade libslurm38Upgrade pdsh-slurm_20_11Upgrade slurm_20_02-torqueUpgrade libslurm31Upgrade slurm_18_08-sqlUpgrade slurm_20_02-pam_slurmUpgrade slurm_22_05-mungeUpgrade slurm_22_05-crayUpgrade slurm_20_02-luaUpgrade libslurm32Upgrade pdsh-genders | Oct 26, 2022 | Sep 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub