CVE-2013-4319 Missing authorization in n/a
Remote authenticated users can execute arbitrary jobs due to improper access restrictions on unprivileged ports in TORQUE Resource Manager.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-4319?
CVE-2013-4319 is a critical missing authorization vulnerability in n/a, published on 11 Oct 2013. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
pbs_mom in Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 2.5.x, 4.x, and earlier does not properly restrict access by unprivileged ports, which allows remote authenticated users to execute arbitrary jobs by submitting a command.
Weakness: CWE-264
Which versions are affected by CVE-2013-4319?
It affects 1 product.
Products include Adaptivecomputing Torque Resource Manager.
How do I fix CVE-2013-4319?
Apply the vendor's patch.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2013-4319 being exploited?
There is no known exploitation of CVE-2013-4319 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DSA-2770-1, GHSA-h32j-52qf-p7w4, MGASA-2013-0308.