TI-2025-40866 CVE-2025-66433 · GHSA-7cjv-vw69-7fxx
Incorrect authorization in wisc HTCondor
Priority LOW 18
HTCondor Access Point before 25.3.1 allows an authenticated user to impersonate other users on the local machine by submitting a batch job.
Vulnerabilities
13 records
TI-2025-21444 CVE-2025-30093 · GHSA-v64g-gxm8-whwj
HTCondor 23.0.x before 23.0.22, 23.10.x before 23.10.22, 24.0.x before 24.0.6, and 24.6.x…
Priority LOW 37
HTCondor 23.0.x before 23.0.22, 23.10.x before 23.10.22, 24.0.x before 24.0.6, and 24.6.x before 24.6.1 allows authenticated attackers to bypass authorization restrictions.
TI-2022-09574 CVE-2022-26110 · GHSA-8vfh-w764-6gcq
An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x…
Priority MEDIUM 41
An issue was discovered in HTCondor 8.8.x before 8.8.16, 9.0.x before 9.0.10, and 9.1.x before 9.6.0.
TI-2021-20436 CVE-2021-45104 · GHSA-6j9j-gvj5-p6jx
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1.
Priority LOW 33
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1.
TI-2021-20435 CVE-2021-45103 · GHSA-gf7w-pw5x-9jh7
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1.
Priority LOW 37
An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1.
TI-2021-20434 CVE-2021-45102 · GHSA-wwgj-pf6c-p6hc
An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2.
Priority MEDIUM 40
An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9.1.x before 9.1.2.
TI-2021-20433 CVE-2021-45101 · GHSA-4vrw-qvg8-27qc
An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before…
Priority LOW 37
An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2.
TI-2021-07550 CVE-2021-25311 · GHSA-h7mc-jr2r-m38g
condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the…
Priority MEDIUM 48
condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by root.
TI-2021-07551 CVE-2021-25312 · GHSA-7qrc-8ggr-g3p9
HTCondor before 8.9.11 allows a user to submit a job as another user on the system…
Priority MEDIUM 40
HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method.
TI-2019-13559 CVE-2019-18823 · GHSA-4w4f-pcxr-8ppr
HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has…
Priority MEDIUM 47
HTCondor up to and including stable series 8.8.6 and development series 8.9.4 has Incorrect Access Control.
TI-2014-06741 CVE-2014-8126 · GHSA-4cwh-h77q-9rqx
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code.
Priority MEDIUM 44
The scheduler in HTCondor before 8.2.6 allows remote authenticated users to execute arbitrary code.
TI-2012-03018 CVE-2012-3490 · GHSA-p9fv-x796-2hrm
The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and…
Priority MEDIUM 44
The (1) my_popenv_impl and (2) my_spawnv functions in src/condor_utils/my_popen.cpp and the (3) systemCommand function in condor_vm-gahp/vmgahp_common.cpp in Condor 7.6.x before 7.6.10 and 7.8.x before 7.8.4 does not pro…
TI-2017-12369 CVE-2017-16816 · GHSA-9x52-5xwr-hfwc
The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote…
Priority LOW 32
The condor_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service (daemon crash) by leveraging use of GSI and VOMS extensions.