{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-11-05T00:00:00", "descriptions": [{"lang": "en", "value": "Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2012-02-02T10:00:00", "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat"}, "references": [{"name": "[oss-security] 20120105 CVE request: TORQUE Munge Authentication Security Bypass", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2012/01/05/1"}, {"name": "47381", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/47381"}, {"name": "[oss-security] 20120105 Re: CVE request: TORQUE Munge Authentication Security Bypass", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2012/01/05/9"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259"}, {"name": "51224", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/51224"}]}}, "cveMetadata": {"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "assignerShortName": "redhat", "cveId": "CVE-2011-4925", "datePublished": "2012-01-13T02:00:00", "dateReserved": "2011-12-23T00:00:00", "dateUpdated": "2012-02-02T10:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.0.1p0:*:*:*:*:*:*:*", "matchCriteriaId": "A760CE96-20B5-4828-9C08-9B52FA39936D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.0.1p1:*:*:*:*:*:*:*", "matchCriteriaId": "CFB41013-A3CB-4D78-9E98-AA43D7B3F924", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.0.1p2:*:*:*:*:*:*:*", "matchCriteriaId": "3D1B2B2C-20A3-4B1D-BF1F-A605AACA8FFE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.0.1p3:*:*:*:*:*:*:*", "matchCriteriaId": "8053A80F-FEB6-4213-9096-C7AB6F0E4EC6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.0.1p4:*:*:*:*:*:*:*", "matchCriteriaId": "940DBDCE-C7D2-4314-BEAC-1295E2F8F22D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.0.1p5:*:*:*:*:*:*:*", "matchCriteriaId": "183400C3-8488-450A-9545-BFE2DB0EF6D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.0.1p6:*:*:*:*:*:*:*", "matchCriteriaId": "DE255AEB-D0D0-4813-A43A-92724AA1DF62", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.1.0p0:*:*:*:*:*:*:*", "matchCriteriaId": "911B5A8D-C946-4921-9749-C199717D26D5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.1.0p1:*:*:*:*:*:*:*", "matchCriteriaId": "573F51CB-3B3D-400D-BA8F-1179BD5B8B0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.1.0p2:*:*:*:*:*:*:*", "matchCriteriaId": "B4125FCA-53DC-46B6-B026-7E4AD4712EC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.1.0p3:*:*:*:*:*:*:*", "matchCriteriaId": "FD9A521F-15F3-48BE-AA0F-28BDF1C073BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.1.0p4:*:*:*:*:*:*:*", "matchCriteriaId": "390A03AB-CD2A-411B-9F81-8859C4FD68F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.1.0p5:*:*:*:*:*:*:*", "matchCriteriaId": "F52E0492-7693-4677-9211-DBFFB4AD101C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.1.0p6:*:*:*:*:*:*:*", "matchCriteriaId": "B1B2252C-DAAB-4AB5-8636-8D99B07049D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.2.0p0:*:*:*:*:*:*:*", "matchCriteriaId": "2084A11D-AC0F-4E59-9561-1742FC828DA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.2.0p1:*:*:*:*:*:*:*", "matchCriteriaId": "62C0BFCA-7063-483B-BB43-0176D8D7696E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.2.0p2:*:*:*:*:*:*:*", "matchCriteriaId": "18663B02-8C8E-4603-B412-25C1C1D6D0C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.2.0p3:*:*:*:*:*:*:*", "matchCriteriaId": "BBDAAEDE-9B82-46A6-B573-79A4D6C6724B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.2.0p4:*:*:*:*:*:*:*", "matchCriteriaId": "90DAA532-489A-42B2-B669-6E7E5B36F2A8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.2.0p5:*:*:*:*:*:*:*", "matchCriteriaId": "110F0D1C-7CE2-4C42-A0E2-23F2D27DD84A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:1.2.0p6:*:*:*:*:*:*:*", "matchCriteriaId": "E5D8C2D6-1BC9-46AE-9D28-F70D50380504", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:2.0.0p0:*:*:*:*:*:*:*", "matchCriteriaId": "567D234F-71B1-42BB-8E06-C7F3D568EA41", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:2.0.0p1:*:*:*:*:*:*:*", "matchCriteriaId": "9690F0E5-AA95-4E2E-B2A9-FAF958BC21EE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:2.0.0p2:*:*:*:*:*:*:*", "matchCriteriaId": "5408E9A3-9F13-4EC2-BDCC-2278859B5986", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:2.0.0p3:*:*:*:*:*:*:*", "matchCriteriaId": "8E60CFB8-0D30-47F0-8BED-89C211FA8FC2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:2.0.0p4:*:*:*:*:*:*:*", "matchCriteriaId": "DE285708-9E30-4936-BE4C-AE5D623810EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:2.0.0p5:*:*:*:*:*:*:*", "matchCriteriaId": "FDE134F2-35B3-4101-B22C-82217C52A478", "vulnerable": true}, {"criteria": "cpe:2.3:a:cluster_resources:torque_resource_manager:2.0.0p6:*:*:*:*:*:*:*", "matchCriteriaId": "88B8375D-D032-4034-A5C9-D4CD33150B16", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "F914BEF9-1A54-408F-88BA-2D085B562F70", "versionEndIncluding": "2.5.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.0p0:*:*:*:*:*:*:*", "matchCriteriaId": "29C9D898-167D-420D-B5E9-D5BEA6D23072", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "EA761446-8547-4947-9D4E-E086B87075A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "899B8050-CFAE-433D-812A-5CDEBFDA4567", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "48ACBFC2-7131-4451-AFB9-752493A877FD", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "305479E9-39E7-4121-8937-C9E44893B9C0", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "C95ADDC1-1F6F-4CAA-94E7-C7B5A503D144", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "4A7F56B2-0121-4C1B-B08A-7AE0B84755DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "523EB787-7589-4CDE-9213-79139D445C9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "C9712C71-A018-4526-8434-51E1F5602687", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "1483A5DA-228C-4CEE-9D1B-728268BCA1E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "28F19311-C9B9-4103-893D-6950E992847E", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "1FE4DFBE-868E-4A7B-B933-4E3EB4D5F3C1", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "CDD8A7A5-8910-4797-A54E-BC427810FB78", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.9:*:*:*:*:*:*:*", "matchCriteriaId": "B0C3BF00-79D6-47CB-9E33-D6BBA4EAFE05", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.10:*:*:*:*:*:*:*", "matchCriteriaId": "E3425F0A-7128-4832-ACB6-8F68CE5EBB6B", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.11:*:*:*:*:*:*:*", "matchCriteriaId": "2AD53862-C791-4566-999D-3F82982ED609", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.3.12:*:*:*:*:*:*:*", "matchCriteriaId": "903E8441-F7C4-4BA7-BF5A-34094A040EFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "B4168BFF-ADE5-4AA9-9F47-D94AA7590B10", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "F340C1E0-52D4-4ABC-BD8D-956849724325", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "10175C93-93A0-4C93-883B-F88B4A0DD12E", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "ACC98979-3F42-41A8-B9E1-7B0DB5398FB0", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "D4C90506-2DC2-41AE-B308-F94C1A8847EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "54AB15BC-1566-4F82-966D-D5D6929F6F6D", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "477D5192-5E68-46AB-AB9E-0CE39CBF578D", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "E6ED0C2B-ADE7-4DB6-82CA-B17D7A277A93", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "EAE061D1-0E17-4B6C-A500-F3DA9DDD605E", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "85EE8536-0C3D-48EC-9D5A-D2504D91814C", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "E84D3308-08B8-4F41-A089-63C327E61D70", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.11:*:*:*:*:*:*:*", "matchCriteriaId": "0EA067A0-C187-46B4-A1D8-FCCC5118893D", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.4.12:*:*:*:*:*:*:*", "matchCriteriaId": "6464ADEA-13EA-4143-83B3-534CDDA22A1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "768C7BE5-040F-4F3B-B62C-03F69D8C4558", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "5ECD0992-A16E-46A5-8D34-5E0B99FA8B52", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "ECD0C163-1EA5-4587-95F4-EDF7F3266C0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "C972A572-9274-4B10-A359-40F200D453A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "26B0922B-986B-4BF1-A6E6-C954AB1A51A4", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "53E3F3C8-E27D-42DC-A73F-56F78DCD0828", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "6A1B1BFB-DD2F-4DCE-AC24-940702E39C6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:clusterresources:torque_resource_manager:2.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "43C05A6F-D005-45FF-811E-166875B8B215", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) before 2.5.9, when munge authentication is used, allows remote authenticated users to impersonate arbitrary user accounts via unspecified vectors."}, {"lang": "es", "value": "Terascale Open-Source Resource and Queue Manager (tambien conocido como TORQUE Resource Manager) antes de su versi\u00f3n v2.5.9, cuando se utiliza suplantar cuentas de usuario de su elecci\u00f3n a usuarios remotos autenticados a trav\u00e9s de vectores no especificados."}], "id": "CVE-2011-4925", "lastModified": "2012-02-02T04:09:18.300", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.9, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2012-01-13T04:14:38.940", "references": [{"source": "secalert@redhat.com", "url": "http://openwall.com/lists/oss-security/2012/01/05/1"}, {"source": "secalert@redhat.com", "tags": ["Patch"], "url": "http://openwall.com/lists/oss-security/2012/01/05/9"}, {"source": "secalert@redhat.com", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/47381"}, {"source": "secalert@redhat.com", "url": "http://www.adaptivecomputing.com/resources/docs/torque/3-0-3/changelog.php#259"}, {"source": "secalert@redhat.com", "url": "http://www.securityfocus.com/bid/51224"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}