Vendors / wisc Records 13 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 9
Exploited now wisc records in CISA KEV No wisc vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by root.
CVSS 3.1 CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.03202 · Published 2021-01-27 · No fix listed CWE-22
Priority MEDIUM 47
HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02811 · Published 2020-04-27 · No fix listed CWE-287
Priority MEDIUM 44
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03107 · Published 2020-01-31 · Fixed in 8.2.6 CWE-20
Priority MEDIUM 44
The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not pro…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03568 · Published 2020-01-09 · No fix listed
Priority MEDIUM 41
An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01459 · Published 2022-04-06 · No fix listed
Priority MEDIUM 40
An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00952 · Published 2021-12-16 · No fix listed CWE-863
Priority MEDIUM 40
HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01049 · Published 2021-01-27 · No fix listed CWE-306
Priority LOW 37
HTCondor 23.0.x before 23.0.22, 23.10.x before 23.10.22, 24.0.x before 24.0.6, and 24.6.x before 24.6.1 allows authenticated attackers to bypass authorization restrictions.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.0036 · Published 2025-03-27 · No fix listed CWE-863
Priority LOW 37
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00921 · Published 2022-04-06 · No fix listed CWE-532
Priority LOW 37
An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01086 · Published 2021-12-16 · No fix listed
Priority LOW 33
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1.
CVSS 3.1 HIGH 7.4· Network · No auth · No interaction · EPSS 0.00592 · Published 2022-04-06 · No fix listed CWE-319
Priority LOW 32
The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01676 · Published 2018-07-05 · No fix listed CWE-20
Priority LOW 18
HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job.
CVSS 3.1 MEDIUM 4.2· Local · Low privileges · No interaction · EPSS 0.00107 · Published 2025-11-30 · Fixed in 24.12.14, 25.0.3 +1 CWE-863
Open these records in search → All records by CVSS severity
2 9 2 0 0
THREATIST.IORead the docs