CVEvulnerability

CVE-2009-4133

6.5 MEDIUM Published 2009-12-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-12-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute.

Affected configurations

• condor project condor 6.5.4 • condor project condor 6.8.0 • condor project condor 6.8.1 • condor project condor 6.8.2 • condor project condor 6.8.3 • condor project condor 6.8.4 • condor project condor 6.8.5 • condor project condor 6.8.6 • condor project condor 6.8.7 • condor project condor 6.8.8 • condor project condor 6.8.9 • condor project condor 7.0.0 • condor project condor 7.0.1 • condor project condor 7.0.2 • condor project condor 7.0.3 • condor project condor 7.0.4 • condor project condor 7.0.5 • condor project condor 7.0.6 • condor project condor 7.1.0 • condor project condor 7.1.1 • condor project condor 7.1.2 • condor project condor 7.1.3 • condor project condor 7.1.4 • condor project condor 7.2.0 • condor project condor 7.2.1 • condor project condor 7.2.2 • condor project condor 7.2.3 • condor project condor 7.2.4 • condor project condor 7.3.0 • condor project condor 7.3.1 • condor project condor 7.3.2 • condor project condor 7.4.0 • redhat enterprise mrg 1.2

References