Auth bypass in Condor Project

CVE-2012-3416

Condor before 7.8.2 allows remote attackers to bypass host-based authentication and execute actions such as ALLOW_ADMINISTRATOR or ALLOW_WRITE by connecting from a system with a spoofed reverse DNS hostname.

Vulnerability class: Broken Authentication

EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References