CVE-2023-49933 — Improper Enforcement of Message Integrity During Transmission in a Communication Channel in Slurm

CWE-924 — Improper Enforcement of Message Integrity During Transmission in a Communication Channel5 documents5 sources

Severity

7.5HIGHNVD

EPSS

0.1%

top 72.38%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Schedmd Slurm

Timeline

PublishedDec 14

Description

An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is Improper Enforcement of Message Integrity During Transmission in a Communication Channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks. The fixed versions are 22.05.11, 23.02.7, and 23.11.1.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDschedmd/slurm22.05 — 22.05.12+2

🔴Vulnerability Details

CVEList

CVE-2023-49933: An issue was discovered in SchedMD Slurm 22↗2023-12-14

▶

OSV

CVE-2023-49933: An issue was discovered in SchedMD Slurm 22↗2023-12-14

▶

GHSA

GHSA-hgjx-j8hg-pxrf: An issue was discovered in SchedMD Slurm 22↗2023-12-14

▶

📋Vendor Advisories

Debian

CVE-2023-49933: slurm-wlm - An issue was discovered in SchedMD Slurm 22.05.x, 23.02.x, and 23.11.x. There is...↗2023

▶