CVE-2019-19728 — Improper Privilege Management in Slurm

CWE-269 — Improper Privilege Management4 documents4 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 37.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Schedmd SlurmDebian LinuxOpensuse Leap
Timeline
PublishedJan 13
Latest updateMay 24

Description

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.6 | Impact: 5.9

Affected Packages2 packages

▶NVDschedmd/slurm19.05.0 — 19.05.5+1
▶NVDopensuse/leap15.1

Also affects: Debian Linux 10.0

🔴Vulnerability Details

3
GHSA
GHSA-grp5-5rv9-mqr6: SchedMD Slurm before 18↗2022-05-24
▶
OSV
CVE-2019-19728: SchedMD Slurm before 18↗2020-01-13
▶
CVEList
CVE-2019-19728: SchedMD Slurm before 18↗2020-01-13
▶
CVE-2019-19728 — Improper Privilege Management in Slurm | cvebase