CVE-2022-29502

SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges

published May 5, 2022

CVSS
—
EPSS
2%
Percentile
78.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky access control mistake could let users with limited permissions suddenly become superusers! 🚀 Think of it like a restaurant where a waiter can just walk into the kitchen and start calling the shots, even though they're not the chef. This situation creates a recipe for chaos! With this vulnerability, an attacker could escalate their privileges and gain unauthorized access to sensitive resources, potentially leading to data leaks or malicious actions within the system. The consequences could range from slight inconveniences to damage that disrupts operations, so it’s crucial to address it!

Put simply

Think of it like a restaurant where a waiter can just walk into the kitchen and start calling the shots, even though they're not the chef. This situation creates a recipe for chaos! The flaw in SchedMD Slurm versions 21.08.x through 20.11.x arises from incorrect access control, allowing users to perform actions they normally wouldn't be authorized to execute. This could lead to privilege escalation exploits without proper safeguards in place.

What to do

With this vulnerability, an attacker could escalate their privileges and gain unauthorized access to sensitive resources, potentially leading to data leaks or malicious actions within the system. The consequences could range from slight inconveniences to damage that disrupts operations, so it’s crucial to address it! To remediate this, ensure you update to the latest patched version of SchedMD Slurm. Review access controls, and conduct an audit of user permissions to close any loopholes. It’s time to tighten up security! You’ve got this! Follow these steps, and you’ll have your systems running smoothly and securely in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01794 · 78.2th percentile
Published
2022-05-05T16:13Z
EPSS history
Timeline
  • 05 MAY 16:13Z
    SchedMD Slurm 21.08.x through 20.11.x has Incorrect Access Control that leads to Escalation of Privileges
    cvelistv5