vulnerability

Debian: CVE-2020-12693: slurm-llnl, slurm-wlm -- security update

Severity
5
CVSS
(AV:N/AC:H/Au:N/C:P/I:P/A:P)
Published
May 21, 2020
Added
Jan 29, 2021
Modified
Nov 4, 2022

Description

Slurm 19.05.x before 19.05.7 and 20.02.x before 20.02.3, in the rare case where Message Aggregation is enabled, allows Authentication Bypass via an Alternate Path or Channel. A race condition allows a user to launch a process as an arbitrary user.

Solutions

debian-upgrade-slurm-llnldebian-upgrade-slurm-wlm
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.