CVE-2024-48936

Published: Oct 28, 2024

Modified: Oct 30, 2024

PUBLISHED

Description

SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to jobs explicitly running with --stepmgr, or on systems that have globally enabled stepmgr via SlurmctldParameters=enable_stepmgr in their configuration.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.schedmd.com/security-policy/

https://lists.schedmd.com/pipermail/slurm-announce/2024/date.html

https://lists.schedmd.com/mailman3/hyperkitty/list/slurm-announce%40lists.schedmd.com/message/44MFMN7R35YZFWTNO43R2754W5B5XUAI/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2024-48936

Description

Affected Products

References