Base Score

HIGH7.5

CVE-2019-19728

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.

VectorNETWORK

Published Bycve@mitre.org

Published DateJan 13, 2020, 19:15

Weakness Type (CWE):CWE-269

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00038.html
https://bugzilla.suse.com/show_bug.cgi?id=1159692
https://lists.schedmd.com/pipermail/slurm-announce/
https://www.debian.org/security/2021/dsa-4841
https://www.schedmd.com/news.php

Base Score

HIGH7.5

Weakness Type (CWE):CWE-269

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

HIGH

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH