CVE-2023-49935

2023-12-1400:00:00

mitre

www.cve.org

schedmd slurm

incorrect access control

bypass

cve-2023-49935

AI Score

9.5

Confidence

High

EPSS

0.001

Percentile

30.5%

JSON

An issue was discovered in SchedMD Slurm 23.02.x and 23.11.x. There is Incorrect Access Control because of a slurmd Message Integrity Bypass. An attacker can reuse root-level authentication tokens during interaction with the slurmd process. This bypasses the RPC message hashes that protect against undesired MUNGE credential reuse. The fixed versions are 23.02.7 and 23.11.1.