CVE-2023-49938 Privilege escalation in n/a
Attackers can modify extended group lists to access files with unauthorized permissions, requiring an upgrade to Slurm.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-49938?
CVE-2023-49938 is a high-severity vulnerability in n/a, published on 14 Dec 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in SchedMD Slurm 22.05.x and 23.02.x. There is Incorrect Access Control: an attacker can modified their extended group list that is used with the sbcast subsystem, and open files with an unauthorized set of extended groups. The fixed versions are 22.05.11 and 23.02.7.
Which versions are affected by CVE-2023-49938?
It affects 1 product.
Products include Schedmd Slurm.
How do I fix CVE-2023-49938?
Upgrade to a fixed version.
Is CVE-2023-49938 being exploited?
There is no known exploitation of CVE-2023-49938 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2023-49938, GHSA-3j4p-qc5m-wqgh, UBUNTU-CVE-2023-49938.