CVE-2014-0748

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local…

published December 27, 2014

CVSS
—
EPSS
0%
Percentile
25.6
In the wild
Unconfirmed
What it is

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.6th percentile
Published
2014-12-27T02:00Z
EPSS history
Timeline
  • 27 DEC 02:00Z
    apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local…
    cvelistv5