Slurm before 19.05.8 and 20.x before 20.02.6 exposes Sensitive Information to an Unauthorized Actor because xauth for X11 magic cookies is affected by a race condition in a read operation on the /proc filesystem.
References
Link | Resource |
---|---|
https://www.debian.org/security/2021/dsa-4841 | Third Party Advisory |
https://www.schedmd.com/news.php | Patch Vendor Advisory |
Configurations
History
03 May 2022, 16:04
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-362 |
28 Jan 2021, 17:45
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | |
References | (DEBIAN) https://www.debian.org/security/2021/dsa-4841 - Third Party Advisory |
28 Jan 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2020-11-27 18:15
Updated : 2023-12-10 13:41
NVD link : CVE-2020-27746
Mitre link : CVE-2020-27746
CVE.ORG link : CVE-2020-27746
JSON object : View
Products Affected
schedmd
- slurm
debian
- debian_linux
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')