CVE-2021-45101 Information disclosure in n/a
Users with read access can discover secrets to control other users' jobs and read their data in HTCondor.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2021-45101?
CVE-2021-45101 is a high-severity vulnerability in n/a, published on 16 Dec 2021. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An issue was discovered in HTCondor before 8.8.15, 9.0.x before 9.0.4, and 9.1.x before 9.1.2. Using standard command-line tools, a user with only READ access to an HTCondor SchedD or Collector daemon can discover secrets that could allow them to control other users' jobs and/or read their data.
Which versions are affected by CVE-2021-45101?
It affects 1 product.
Products include Wisc Htcondor.
How do I fix CVE-2021-45101?
Upgrade to a fixed version.
Is CVE-2021-45101 being exploited?
There is no known exploitation of CVE-2021-45101 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2021-45101, GHSA-4vrw-qvg8-27qc, UBUNTU-CVE-2021-45101.