| Max CVSS | 6.4 | Min CVSS | 4.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-3491 | 4.0 |
src/condor_schedd.V6/schedd.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not properly check the permissions of jobs, which allows remote authenticated users to remove arbitrary idle jobs via unspecified vectors.
|
03-10-2012 - 04:00 | 28-09-2012 - 17:55 | |
| CVE-2012-3493 | 5.8 |
The command_give_request_ad function in condor_startd.V6/command.cpp Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 allows remote attackers to obtain sensitive information, and possibly control or start arbitrary jobs, via a ClassAd request to the
|
03-10-2012 - 04:00 | 28-09-2012 - 17:55 | |
| CVE-2012-3492 | 6.4 |
The filesystem authentication (condor_io/condor_auth_fs.cpp) in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 uses authentication directories even when they have weak permissions, which allows remote attackers to impersonate users by renaming a u
|
03-10-2012 - 04:00 | 28-09-2012 - 17:55 |