CVEvulnerability

CVE-2014-0748

7.2 HIGH Published 2014-12-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-12-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

apinit on Cray devices with CLE before 4.2.UP02 and 5.x before 5.1.UP00 does not use alpsauth data to validate the UID in a launch message, which allows local users to gain privileges via a modified aprun program, aka ID FN5912.

Affected configurations

• cray cray linux environment (<= 4.2) • cray cray linux environment 5.1

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References