Vulnerability in Schedmd Slurm
CVE-2023-49938
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7.
EPSS: 0.008 (51.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Schedmd Slurm
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory)
- cve@mitre.org (Mailing List, Vendor Advisory)
- cve@mitre.org (vendor-advisory)
- cve@mitre.org (vendor-advisory)
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Frequently asked questions
- What is CVE-2023-49938?
- CVE-2023-49938 is a high-severity vulnerability in Schedmd Slurm. CVSS score: 8.2/10. Published 2023-12-14.
- How severe is CVE-2023-49938?
- High severity. CVSS v3 base score is 8.2 out of 10.