CVE-2021-45103 — Log File Information Exposure in Htcondor

CWE-532 — Log File Information Exposure5 documents5 sources
Severity
8.1HIGHNVD
EPSS
0.3%
top 48.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Wisc Htcondor
Timeline
PublishedApr 6
Latest updateApr 7

Description

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 2.8 | Impact: 5.2

Affected Packages1 packages

▶NVDwisc/htcondor8.9.4 — 9.0.10+1

🔴Vulnerability Details

3
GHSA
GHSA-gf7w-pw5x-9jh7: An issue was discovered in HTCondor 9↗2022-04-07
▶
CVEList
CVE-2021-45103: An issue was discovered in HTCondor 9↗2022-04-06
▶
OSV
CVE-2021-45103: An issue was discovered in HTCondor 9↗2022-04-06
▶

📋Vendor Advisories

1
Debian
CVE-2021-45103: condor - An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. ...↗2021
▶
CVE-2021-45103 — Log File Information Exposure | cvebase